FISMA & NIST RMF
Monitor Step (RMF Step 6)
The sixth step of the Risk Management Framework, in which the system owner sustains the authorization through continuous monitoring of selected controls, ongoing assessment, and configuration management. NIST SP 800-137 governs the design of the monitoring strategy, and modern implementations pursue Ongoing Authorization, in which a sustained monitoring program substitutes for the traditional three-year reauthorization cycle.