CMMC 2.0 • LEVEL 2 • SECURITY ASSESSMENT
CA.L2-3.12.3 — Continuous Monitoring
Continuous monitoring at the system level facilitates ongoing awareness of the system security posture to support risk management decisions. The terms continuous and ongoing imply that organizations assess and monitor their systems at a frequency that is sufficient to support risk-based decisions. Different types of security requirements may require different monitoring frequencies.
Assessment Objectives
- a system-level continuous monitoring strategy is developed.
- a system-level continuous monitoring strategy is implemented.
- ongoing monitoring is included in the continuous monitoring strategy.
- security assessments are included in the continuous monitoring strategy.
Practitioner Notes
Practitioner commentary coming soon.