Risk Management Framework

Chapter 14

RMF Phase 6

Monitoring Security Controls

Abstract

This chapter introduces the sixth phase of the RMF, which is when a system enters operation, is continually monitored, and is eventually disposed of.

Keywords

operations and maintenance

O&M

security changes

ongoing monitoring

continuous monitoring

system disposal

change management

Table of Contents

Chapter Overview and Key Learning Points

Phase 6, Task 1: Monitoring Information System and Environment Changes

Phase 6, Task 2: Ongoing Security Control Assessment

Phase 6, Task 3: Ongoing Remediation Actions

Phase 6, Task 4: Updating the Security Documentation

Phase 6, Task 5: Security Status Reporting

Phase 6, Task 6: Ongoing Risk Determination and Acceptance

Phase 6, Task 7: System ...