• United States



Continuous Monitoring According to FISMA – Steven Polk, ITILv3Ž MCTS

Jun 21, 20112 mins
Business ContinuityCareersData and Information Security

One analogy that will describe the movement toward awareness is to think of system managers as Air Traffic Controllers in action. Currently, Continuous Monitoring is employed by systems owners like the big boards in the arrival terminals at airports. The boards are packed with lists of arriving and departing flights and their status. The board shows the airline, the flight number, departure city or destination, departing or arriving gate, departing or arriving time and the flight’s status – “On Time”, “Delayed” or “Cancelled.”

Now let’s take a page out of the history books and suggest that the airport is socked in with a sudden blast of winter weather in the form of a Nor’easter. As the family member who has drawn the assignment of has picking up the mother-in-law from the airport, you prudently checked the status her flight before you made the 50 minute drive to the airport through worsening traffic conditions. The flight’s status shows en route and on time.

Now that you have completed your trek to the airport, parked and trudged into the airport’s baggage claim area, you again check the flight status. Now the board shows that the flight is “Delayed.” What’s next? You don’t know whether to return to your car and go home or to grab a snack and hunker down for a wait as the airport struggles to stay ahead of the inclement weather by plowing and treating the surfaces. Your hope is that inbound flights work their way around the storm and will be arriving very soon – they have to arrive sometime soon, right?

Read the whole whitepaper at – 

 Contact Steve at