Importance of continuous monitoring of information systems

Reference no: EM132749891

Assignment: Continuous monitoring is a critical part of the risk management process. "Continuous monitoring is ongoing observance with intent to provide warning. A continuous monitoring capability is the ongoing observance and analysis of the operational states of systems to provide decision support regarding situational awareness and deviations from expectations." -Source: Keith Willett (MITRE) in support of the National Security Agency.

"Information Security Continuous Monitoring (ISCM) is defined as maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions." -NIST.

Organizations should establish, implement, and maintain ISCM. ISCM should be a recursive process as its monitoring strategy is continually refined so that ISCM is a robust system. Tiered organization-wide ISCM framework and dynamic ISCM processes are proposed by the National Institute of Standards and Technology. Please scan through the important framework and processes in the following article. Its Appendix D "Technologies for Enabling ISCM" provides some technical and managerial details and examples.

NIST (2011). Information Security -- Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations. National Institute of Standards and Technology Special Publication 800-137.

Additional reference models are also provided and extended to go more in depth both technically and managerially. Also review the CAESARS model below.

Mell, P., Waltermire, D., Feldman, L., Booth, H., Ouyang, A., Ragland, Z., & McBride, T. (2012). CAESARS framework extension: an enterprise continuous monitoring technical reference model (in documents)

Case Assignment

After reading the above articles, please write a 3- to 5-page paper titled: "Information Security Continuous Monitoring-Challenges and Solutions"

Expectations: Please address the following issues in your paper:

• The importance of continuous monitoring of information systems.

• The technical and managerial challenges of continuous monitoring.

• The technical and managerial solutions to continuous monitoring, including framework, processes, etc.

Reference no: EM132749891

Questions Cloud

What are main financial risk management issues : What are the main financial risk management issues that Cathy and the rest of the management team at Kilgore need to focus on?

Explain the two perspectives of continuous monitoring : The following example demonstrates how to apply the continuous monitoring technical reference model to a risk management domain. Please read the following.

Enterprise risk management : What are the advantages of integrating ERM with strategy and strategy executions as described in this case,

Information and communication technology policy : Information and Communication Technology Policy Making is a complex process in which many stakeholders are involved.

Importance of continuous monitoring of information systems : Continuous monitoring is a critical part of the risk management process. "Continuous monitoring is ongoing observance with intent to provide warning.

What lessor will recognize a net investment in the lease : Assume the lease is a finance lease. The lessor will recognize a net investment in the lease at the lease commencement equal to

Why is required that companies disclose concentration : Why is it required that companies disclose a significant concentration of credit risk in the notes accompanying the financial statements?

Challenges in monitoring of information systems security : Evaluate some technologies that can help with continuous monitoring. One example of many is Cyberscope, an automated reporting tool for security reporting.

Explain how you would reduce potential vulnerabilities : Explain how you would reduce potential vulnerabilities, protect against intrusion attempts, and better anticipate future threats.

User Account

All Pages