The Promises and Challenges of Continuous Monitoring and Risk Scoring

Continuous monitoring and risk scoring is a comprehensive process of maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions. Two of the most salient aspects of CMRS are continuous data collection through automated feeds and analysis of that data to assess and score risks. CMRS attracts growing interest due to its potential to be far more agile, responsive, and perhaps less expensive than such alternatives as periodic reporting and certification. While the potential benefits could be great, so are the challenges of implementing a successful CMRS system.