Continuous monitoring program

Definition
A Continuous monitoring program (CMP) is

"[m]aintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions."