The Continuous Monitoring module

The Continuous Monitoring module enables your organization to fulfill cybersecurity controls that require tasks to be completed on a recurring basis. For example, you may state in your System Security Plan (SSP) that you perform vulnerability scans on a monthly basis. The Continuous Monitoring module allows you to create a task for performing vulnerability scans and assign the task to any internal/external users. When the task comes due, the user(s) will receive email reminders to complete the task, and once they’ve done so, they can record its completion in Totem. Totem will then retain a Completion Log for the task, serving as a source of compelling evidence for a future audit/assessment.

The Continuous Monitoring module also is designed to help defense contractors implement control CA.L2-3.12.3: Monitor security controls on an ongoing basis to ensure the continued effectiveness of the controls. This control requires maintaining a Continuous Monitoring Plan (e.g., the sum total of all your individual tasks), now included in Totem.

Explore our other Continuous Monitoring guides to learn more about how to use this module!