Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue CA-07: CA-07 Continuous monitoring

The organisation develops a system-level continuous monitoring strategy consistent with the organisation-level strategy and implements it, covering defined system metrics, monitoring and assessment frequencies, ongoing control assessments and metric monitoring, correlation and analysis of the results, response actions, and reporting of security and privacy status to defined roles at a set frequency. The GC discussion describes trend analysis of threat, attack, vulnerability, configuration and audit findings and requires prior notice to individuals where personal information is used for it. 6 enhancements.