Continuous monitoring is an integral step for ongoing awareness of information security, vulnerabilities, and threats to facilitate risk-based decision making. When developing your approach to Continuous Monitoring, you need to answer some fundamental questions in order to build your risk profile.