Monitoring bingo
Exercise and reference answers
- Clues and terms
- Clue
- Ongoing awareness of security, vulnerabilities and threats.
- Item
- ISCM
- Clue
- What makes collection and reporting most effective.
- Item
- Automation
- Clue
- The organisation level, which drives the strategy.
- Item
- Tier 1
- Clue
- The information systems level, where assessments run.
- Item
- Tier 3
- Clue
- Information presented in context for each tier.
- Item
- Metrics
- Clue
- Can mislead if nobody rechecks what it measures.
- Item
- Dashboard
- Clue
- How often a control is likely to change after rollout.
- Item
- Volatility
- Clue
- Mitigate, transfer, avoid or simply accept the risk.
- Item
- Respond
- Clue
- One way analysed information reaches officials.
- Item
- Data feed
- Instructions
- Read each clue and tap the term it describes.
Explanation
_Source: NIST SP 800-137, 'Information Security Continuous Monitoring for Federal Information Systems and Organizations'_