SP 800-137 - Continuous Monitoring

SP 800-137 is a NIST Special Publication that offers guidance on establishing and maintaining a continuous monitoring program for federal information systems, helping agencies meet the ongoing security assessment and authorization requirements of the Federal Information Security Modernization Act of 2014. It outlines processes, metrics, and tools for real-time risk management and system performance evaluation.