PM-31: Continuous Monitoring Strategy

An OSCAL Control

- organization-defined personnel or roles
- metrics
  the metrics for organization-wide continuous monitoring are defined;
- personnel or roles
  the personnel or roles for reporting the security status of organizational systems to is/are defined;
- personnel or roles
  the personnel or roles for reporting the privacy status of organizational systems to is/are defined;
- frequency
  the frequency at which to report the security status of organizational systems is defined;
- organization-defined frequency
- monitoring frequencies
  the frequencies for monitoring are defined;
- assessment frequencies
  the frequencies for assessing control effectiveness are defined;
- frequency
  the frequency at which to report the privacy status of organizational systems is defined;