Information security continuous monitoring (ISCM) programs provide an understanding of risk tolerance and help officials set priorities and consistently manage information security risk throughout the organization.NISTIR 8212, An Information Security
Source:: NIST