Risk Management Framework (RMF) step 6 - Monitor the approved authorization package

Monitor the approved package to track its status and ensure all activities progress as planned.

Before you begin

Role required: sn_irm_cont_auth.system_owner, sn_irm_cont_auth.info_system_sec_officer, sn_irm_cont_auth.authorization_official, sn_irm_cont_auth.info_system_sec_manager, sn_irm_cont_auth.admin

Procedure

1. When the authorization package is approved by the Authorizing Official the authorization package in the Authorization state, transitions to Monitor.
   Note:

   In the Monitor state, continuous monitoring is achievable if you have indicators. If not, you can manually review the controls. For more information, see Manage control indicators.
2. You can monitor the authorization package.