CA-7: Continuous Monitoring

An OSCAL Control

- organization-defined personnel or roles
- system-level metrics
  system-level metrics to be monitored are defined;
- frequencies
  frequencies at which to assess control effectiveness are defined;
- personnel or roles
  personnel or roles to whom the security status of the system is reported are defined;
- personnel or roles
  personnel or roles to whom the privacy status of the system is reported are defined;
- frequency
  frequency at which the privacy status of the system is reported is defined;
- organization-defined frequency
- frequencies
  frequencies at which to monitor control effectiveness are defined;
- frequency
  frequency at which the security status of the system is reported is defined;