Continuous Asset Evaluation, Situational Awareness, and Risk Scoring

Overview
Continuous Asset Evaluation, Situational Awareness, and Risk Scoring (CAESARS) represents a solution for making assessments on a continuous or nearly continuous basis &mdash; this is a prerequisite for moving IT security management from isolated assessments that support infrequent authorization decisions to continuous risk management as described in the current federal guidance of the National Institute of Standards and Technology and Office of Management and Budget mandates.

The CAESARS approach provides a means of monitoring security controls and focusing staff efforts on those controls most likely to enhance the agency's information security posture.

External resource

 * Federal Network Resilience, "Continuous Asset Evaluation, Situational Awareness, and Risk Scoring Reference Architecture Report (CAESARS)" (Document No. MP100146) (Ver. 1.8) (Sept. 2010) (full-text).