3. Consider the Information Security Continuous Monitoring (ISCM) component in Risk Management in NIST 800-137 Define Continuous Monitoring Maps to risk tolerance Adapts to ongoing needs Actively involves 1. How does ISCM fit into overall risk management 2. Walk through the ISCM steps(fig 3.1) for the Banking problem described in problem 4 3. Explain how ISCM fits the system security model shown in problem 1 Figure 3-1.SCM Process