SEC575 Information Security Continuous Monitoring (ISCM) Training

Course Description

Short Course | 18 Hours | 1.8 CEUs

Our Information Security Continuous Monitoring (ISCM) Training provides comprehensive training in the development and implementation of an effective continuous monitoring program based on guidance from the National Institute of Standards and Technology (NIST). Designed for cybersecurity and information security professionals, this instructor-led course explores how organizations can use the Risk Management Framework, security controls, and continuous monitoring guidance to strengthen their security programs.

Students gain practical knowledge of the theory, policies, and procedures needed to establish and maintain an ISCM program. Topics include roles and responsibilities, continuous monitoring strategies, risk management, security configuration management, organizational metrics, automation, analysis and reporting, responding to findings, and program review. The course also explores supporting technologies such as Security Information and Event Management (SIEM) and the Security Content Automation Protocol (SCAP).

Course Outline

Introduction to Continuous Monitoring (NIST SP 800-137)
- Overview/Objectives
- Key Terms
- Why Continuous Monitoring?
- Overview of Continuous Monitoring Process
- Organization-wide View of ISCM
- ISCM Roles and Responsibilities
Continuous Monitoring and Other NIST Guidance
- NIST SP 800-39 – Risk Management Process
- NIST SP 800-55 – Defining Organizational Metrics and Measurements
- NIST SP 800-128 – Security Configuration Management for Information Systems
- NIST SP 800-37, Rev. 1 – NIST Risk Management Framework
- NIST SP 800-53, Rev. 4 – Security Control Catalogue
ISCM Process – NIST SP 800-137
- Step 1 – Define Strategy
- Step 2 – Establish ISCM Program
- Step 3 – Implement
- Step 4 – Analyze and Report
- Step 5 – Respond to Findings
- Step 6 – Review and Update
The Fundamentals – Ongoing Monitoring in Support of Risk Management
- Organization-wide View of Continuous Monitoring
- Ongoing System Authorizations
- Role of Automation in Continuous Monitoring
- Technologies for Enabling ISCM
Building a Continuous Monitoring Program
- Define Continuous Monitoring Strategy
- Establish an ISCM Program
Implementing and Maintaining a Continuous Monitoring Program
- Implement a Continuous Monitoring Program
- Analyze Data and Report Findings
- Respond to Findings
- Review and Update the Monitoring Program and Strategy
Supporting Technologies
- Security Automation Domains
- Security Information and Event Management (SIEM)
- Security Content Automation Protocol (SCAP)
- Reference Data Sources
  - National Vulnerability Database
  - Security Configuration Checklists
ISCM Reference Model