联邦风险与授权管理计划-持续监管策略及指南.docxVIP

Continuous Monitoring Strategy Guide v2.0 June 6, 2014 Page PAGE 2 Continuous Monitoring Strategy Guide v2.0 June 6, 2014 Continuous Monitoring Strategy Guide Version 2.0 June 6, 2014  Executive Summary The OMB memorandum M-10-15, issued on April 21, 2010, changed from static point in time security authorization processes to Ongoing Assessment and Authorization throughout the system development life cycle. Consistent with this new direction favored by OMB and supported in NIST guidelines, FedRAMP developed an ongoing assessment and authorization program for the purpose of maintainin