PAGE1 CHAPTERONE INTRODUCTION nformationsecuritycontinuousmonitoring(ISCM)isdefinedasmaintainingongoingawarenessofinformationsecurity,vulnerabilities,andthreatstosupportorganizationalriskmanagementdecisions.2Thispublicationspecificallyaddressesassessmentandanalysis