The NIST framework 800-137 breaks down the concept of continuous monitoring into which system of...

The NIST 800-137 framework for continuous monitoring categorizes monitoring activities into three tiers:

Tier 1: Information systems, where monitoring focuses on the status and performance of individual systems.

Tier 2: Mission/business processes, which monitor the operations and processes necessary to support organizational missions.

Tier 3: The organization, where overall strategic goals and enterprise-wide risks are assessed and managed.