The purpose of the Monitor Step is to maintain an ongoing situational awareness about the security and privacy posture of the system and the organization in support of risk management decisions.
All links below point to PDF files for the Monitor StepSecurity and Privacy: risk management
Laws and Regulations: E-Government Act, Federal Information Security Modernization Act