Continuous Monitoring is a program of testing to verify the continuous effectiveness of protection measures in place. It is a strategy initially advocated by NIST that provides assurance not provided by other, lesser measures. Monitoring involves commitment of resources (costs) that others have side stepped, recent serious security incidents are vivid proof of the results.