STIGhub
STIGs
RMF Controls
Compare
← All Controls
CA-7
Assessment, Authorization, and Monitoring
Rev 5
Continuous Monitoring
CCI Identifiers (23)
CCI-000274
Develop a continuous monitoring strategy.
CCI-000275
The organization implements a continuous monitoring program that includes a configuration management process for the information system.
CCI-000276
The organization implements a continuous monitoring program that includes a configuration management process for the information system constituent components.
CCI-000277
The organization implements a continuous monitoring program that includes a determination of the security impact of changes to the information system.
CCI-000278
The organization implements a continuous monitoring program that includes a determination of the security impact of changes to the environment of operation.
CCI-000279
Implement ongoing control assessments in accordance with the continuous monitoring strategy.
CCI-000280
Implement a continuous monitoring program that includes reporting the security status to organization-defined personnel or roles on an organization-defined frequency.
CCI-000281
Defines the frequency with which to report the security status to organization-defined personnel or roles.
CCI-001581
The organization defines personnel or roles to whom the security status of the organization and the information system should be reported.
CCI-002087
Establish organization-defined system-level metrics to be monitored.
CCI-002088
Establish organization-defined frequencies for monitoring.
CCI-002089
The organization establishes and defines the frequencies for assessments supporting continuous monitoring.
CCI-002090
Implement ongoing monitoring of system and organization-defined metrics in accordance with the continuous monitoring strategy.
CCI-002091
Implement a continuous monitoring program that includes correlation and analysis of information generated by assessments and monitoring.
CCI-002092
Implement a continuous monitoring program that includes response actions to address results of the analysis of control assessment and monitoring information.
CCI-003873
Implement continuous monitoring in accordance with the organization-level continuous monitoring strategy.
CCI-003874
Defines the system-level metrics to be monitored.
CCI-003875
Establish organization-defined frequencies for assessment of control effectiveness.
CCI-003876
Defines the frequencies for monitoring of control effectiveness.
CCI-003877
Defines the frequencies for assessment of control effectiveness.
CCI-003878
Develop ongoing control assessments in accordance with the continuous monitoring strategy.
CCI-003879
Implement a continuous monitoring program that includes reporting the privacy status to organization-defined personnel or roles on an organization-defined frequency.
CCI-003880
Defines the frequency with which to report the privacy status to organization-defined personnel or roles.
Linked STIG Checks (0)
No STIG checks reference this control.