top of page
RMF Step 6 - Monitoring 

Guidance:  NIST SP 800-30; 37; 39; 53; 53A 137 

  • Maintain Authority to Operate

    • Address conditions of Authority to Operate with caveats​

    • Continuously execute technical compliance with security tools

    • Implement the ISCM Strategy for monitored and unmonitored security controls

    • Reassess configuration modifications and notify all major stakeholders 

    • Request and perform Decommission Services for sunset/end-of-life systems

bottom of page