Monitoring the information security metrics defined by the organization in the information security ISCM strategy.
Source(s):
NIST SP 800-137
under Status Monitoring