[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-sp\u002F800-137":3},{"item":4,"lessons":16,"controls":66,"related":96},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-sp","800-137","SP 800-137","SP 800-137: Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations",44,"US National Institute of Standards and Technology (NIST)","**What it covers.** NIST guidance on establishing a continuous monitoring programme that maintains ongoing awareness of security posture, vulnerabilities and threats to support risk decisions. It covers defining a strategy, establishing the programme, implementing it, analysing and reporting findings, responding and reviewing the programme.\n\n**In practice.** Organisations decide which controls and metrics to monitor, at what frequency, and who receives the results, combining automated data such as configuration and vulnerability status with manual assessments. Results feed risk decisions and authorisation, not only dashboards. Evidence includes the monitoring strategy, defined metrics and frequencies, reports to decision makers and actions taken on findings.\n\n**Common gaps.** Common gaps are collecting large amounts of data without defined decisions it should inform, and monitoring frequencies that do not match the risk of the system.",null,"https:\u002F\u002Fcsrc.nist.gov\u002Fpublications\u002Fsp800","Find it among NIST SP 800 publications","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"mssps-must-shift-left-proactive-threat-hunting-is-the-new-ransomware-defense","MSSPs Must Shift Left: Proactive Threat Hunting Is the New Ransomware Defense","2026-10-13T12:20:17.419+00:00",{"slug":23,"title":24,"published_at":25},"98-zero-days-exposed-at-pwn2own-ireland-what-vendors-must-do-next","98 Zero-Days Exposed at Pwn2Own Ireland: What Vendors Must Do Next","2026-10-09T06:20:24.71+00:00",{"slug":27,"title":28,"published_at":29},"russian-apt-uac-0099-upgrades-matchboil-malware-with-enhanced-stealth-against-ukrainian-targets","Russian APT UAC-0099 Upgrades MatchBoil Malware with Enhanced Stealth Against Ukrainian Targets","2026-10-08T20:21:35.327+00:00",{"slug":31,"title":32,"published_at":33},"cisos-cant-answer-boards-top-security-questions-due-to-data-silos-and-activity-focused-metrics","CISOs Can't Answer Board's Top Security Questions Due to Data Silos and Activity-Focused Metrics","2026-10-02T12:20:36.166+00:00",{"slug":35,"title":36,"published_at":37},"ai-gives-attackers-the-edge-defenders-must-accelerate-to-keep-pace","AI Gives Attackers the Edge: Defenders Must Accelerate to Keep Pace","2026-10-01T20:20:47.704+00:00",{"slug":39,"title":40,"published_at":41},"ai-is-accelerating-vulnerability-discovery-and-exploitation-is-your-patching-keeping-up","AI Is Accelerating Vulnerability Discovery and Exploitation — Is Your Patching Keeping Up?","2026-09-30T17:20:24.468+00:00",{"slug":43,"title":44,"published_at":45},"autonomous-remediation-redefines-enterprise-patch-speed-expectations","Autonomous Remediation Redefines Enterprise Patch Speed Expectations","2026-09-29T16:21:57.325+00:00",{"slug":47,"title":48,"published_at":49},"needymantis-malware-enables-persistent-nation-state-access-across-critical-sectors","NeedyMantis Malware Enables Persistent Nation-State Access Across Critical Sectors","2026-09-29T16:21:02.533+00:00",{"slug":51,"title":52,"published_at":53},"kiteworks-orders-9-hour-system-shutdown-amid-credible-cyberattack-threat","Kiteworks Orders 9-Hour System Shutdown Amid Credible Cyberattack Threat","2026-09-26T12:21:27.393+00:00",{"slug":55,"title":56,"published_at":57},"kiteworks-zero-day-warning-highlights-need-for-rapid-response-protocols","Kiteworks Zero-Day Warning Highlights Need for Rapid Response Protocols","2026-09-25T22:20:34.617+00:00",{"slug":59,"title":60,"published_at":61},"ai-accelerated-attacks-outpace-fragmented-soc-defenses","AI-Accelerated Attacks Outpace Fragmented SOC Defenses","2026-09-25T14:21:36.552+00:00",{"slug":63,"title":64,"published_at":65},"fedramp-mandates-continuous-vulnerability-management-beyond-monthly-scans","FedRAMP Mandates Continuous Vulnerability Management Beyond Monthly Scans","2026-09-24T21:21:12.895+00:00",[67,72,77,81,86,91],{"slug":68,"name":69,"problem":70,"stories":71},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",20,{"slug":73,"name":74,"problem":75,"stories":76},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",13,{"slug":78,"name":79,"problem":80,"stories":76},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",{"slug":82,"name":83,"problem":84,"stories":85},"patch-management","Automated patch management","Known holes get closed in days, not months.",11,{"slug":87,"name":88,"problem":89,"stories":90},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",7,{"slug":92,"name":93,"problem":94,"stories":95},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",6,[97,102,108,113,119,124,129,134],{"family":98,"item":99,"code":100,"title":100,"together":101},"itil","overview","ITIL",29,{"family":103,"item":104,"code":105,"title":106,"together":107},"cis","13","Control 13","Network Monitoring and Defense",26,{"family":103,"item":109,"code":110,"title":111,"together":112},"7","Control 7","Continuous Vulnerability Management",22,{"family":114,"item":115,"code":116,"title":117,"together":118},"nist-csf","de-cm","DE.CM-1","Continuous Monitoring",21,{"family":103,"item":120,"code":121,"title":122,"together":123},"17","Control 17","Incident Response Management",18,{"family":5,"item":125,"code":126,"title":127,"together":128},"800-61","SP 800-61","SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management",17,{"family":130,"item":99,"code":131,"title":132,"together":133},"mitre-attack","ATT&CK","MITRE ATT&CK",16,{"family":5,"item":135,"code":136,"title":137,"together":138},"800-40","SP 800-40","SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology",14]