Continuous Authorization and Monitoring

Release version:
Xanadu
Yokohama
Washington DC
Vancouver
Utah
UpdatedAug 8, 2024
2 minutes to read

Xanadu
Continuous Authorization and Monitoring

Continuous Authorization and Monitoring (CAM) employs the seven steps defined by the NIST Risk Management Framework (RMF) to allow you to make better-informed decisions about your security posture.

The video gives you an overview of the seven steps of the Risk Management Framework mandated by the US government for federal agencies that help companies to identify and eliminate risks to their infrastructure.

Get started

Explore The CAM application applies a standardized approach to automating NIST's Risk Management Framework (RMF).

Configure Follow the steps in the checklist to download CAM from the ServiceNow Store and get it ready for operation.

RMF Step 1 - Prepare In the Prepare step, you set up authorization boundaries, control overlays, and information types, as well as create the actual authorization package.

RMF step 2 - Categorize In the Categorize step, you define the criticality or sensitivity of your information system according to potential worst-case scenarios.

RMF step 3 - Select controls When the impact levels for the package have been approved, it is time to select baseline controls.

RMF step 4 - Implement controls After you have selected controls for implementation and performed any of the possible actions on them, you can implement the controls.

RMF steps 5, 6, and 7After you have implemented controls, you can assess internal and external controls, generate Plans of Action and Milestones (POA&M), and manage change requests and vulnerable items.

Implementing controls and assessment objectives NIST 800-53A – assessment objectives are included in the base system with the CAM application. The assessment objectives are mapped to revision 5 control objectives.

Monitoring and managing The CAM Workspace is a centralized hub where you can continuously monitor and manage compliance with the NIST Risk Management Framework to ensure adherence to your security policies and guidelines.

Reference Reference topics provide the detailed descriptions of tables, properties, forms, and roles that are installed with the CAM application.

Request apps on the Store

Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

The Continuous Authorization and Monitoring (com.sn_irm_cont_auth_monitor) plugin is available as a separate subscription and requires activation.

Xanadu Governance, Risk, and Compliance

Filters

Versions

Products