NIST SP 800-53 Rev. 5
PM-31
Program Management

Continuous Monitoring Strategy

Description

Develop an organization-wide continuous monitoring strategy and implement continuous monitoring programs that include: a. Establishing the following organization-wide metrics to be monitored: [organization-defined parameter]; b. Establishing [organization-defined parameter] and [organization-defined parameter] for control effectiveness; c. Ongoing monitoring of organizationally-defined metrics in accordance with the continuous monitoring strategy; d. Correlation and analysis of information generated by control assessments and monitoring; e. Response actions to address results of the analysis of control assessment and monitoring information; and f. Reporting the security and privacy status of organizational systems to [organization-defined parameter] [organization-defined parameter].

Mapped SPARTA techniques

67 techniques

Cite as SafeMode Space, nist-80053-rev5 PM-31.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.