Information SecurityUnited States
NIST SP 800-137
Information Security Continuous Monitoring (ISCM) for Federal Information Systems.
Domains
Programme Management
IR and Authorisation
Malware and Access Monitoring
Vulnerability and Configuration
Reporting and Risk Scoring
Compare NIST SP 800-137
NIST SP 800-137 by Industry
NIST SP 800-137 by Role
Frequently Asked Questions
What is NIST SP 800-137?
Information Security Continuous Monitoring (ISCM) for Federal Information Systems.
How many controls does NIST SP 800-137 have?
NIST SP 800-137 contains 8 controls organized across 8 domains.
Where does NIST SP 800-137 apply?
NIST SP 800-137 is applicable in United States. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
What frameworks does NIST SP 800-137 map to?
NIST SP 800-137 has control-to-control mappings with 147 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.
How do I get started with NIST SP 800-137 compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.
How ready are you for NIST SP 800-137?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.