03.12 — Security Assessment and Monitoring
25 requirements in the Security Assessment and Monitoring family
03.12.01Security Assessment Assessment
A.03.12.01.ODP[01]Security Assessment ODP[01]
A.03.12.01Security Assessment
03.12.02Plan of Action and Milestones Assessment
A.03.12.02.a.01Plan of Action and Milestones a.01
A.03.12.02.a.02Plan of Action and Milestones a.02
A.03.12.02.b.01Plan of Action and Milestones b.01
A.03.12.02.b.02Plan of Action and Milestones b.02
A.03.12.02.b.03Plan of Action and Milestones b.03
03.12.03Continuous Monitoring Assessment
A.03.12.03[01]a system-level continuous monitoring strategy is developed
A.03.12.03[02]a system-level continuous monitoring strategy is implemented
A.03.12.03[03]ongoing monitoring is included in the continuous monitoring strategy
A.03.12.03[04]security assessments are included in the continuous monitoring strategy
03.12.04System and Network Security Architecture Assessment
03.12.05Information Exchange Assessment
A.03.12.05.ODP[01]Information Exchange ODP[01]
A.03.12.05.ODP[02]Information Exchange ODP[02]
A.03.12.05.a[01]Information Exchange a[01]
A.03.12.05.a[02]Information Exchange a[02]
A.03.12.05.b[01]Information Exchange b[01]
A.03.12.05.b[02]Information Exchange b[02]
A.03.12.05.b[03]Information Exchange b[03]
A.03.12.05.c[01]Information Exchange c[01]
A.03.12.05.c[02]Information Exchange c[02]