Continuous monitoring: It's a process, not a goal

The new approach to FISMA makes the three-year snapshot a thing of the past, but monitoring for security is just getting started.