U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

NIST IR 8212

ISCMA: An Information Security Continuous Monitoring Program Assessment

Date Published: March 2021

Planning Note (03/31/2021):

The ISCMAx tool available under Supplemental Material is a macro-enabled Microsoft Excel application that runs on Windows-based systems only. ISCMAx is not intended to be a production-level product.


Author(s)

Kelley Dempsey (NIST), Victoria Pillitteri (NIST), Chad Baer (DHS), Ron Rudman (MITRE), Robert Niemeyer (MITRE), Susan Urban (MITRE)

Abstract

Keywords

assessment; continuous monitoring; information security continuous monitoring; information security continuous monitoring assessment; ISCM; ISCMA; ISCMAx
Control Families

None selected

Documentation

Publication:
https://doi.org/10.6028/NIST.IR.8212
Download URL

Supplemental Material:
ISCMAx: Recommended Judgments (xlsx)
ISCMAx: Alternate Judgments (xlsx)

Related NIST Publications:
SP 800-137A

Document History:
10/01/20: IR 8212 (Draft)
03/31/21: IR 8212 (Final)