At a very high level, we need to set the foundation of a continuous monitoring capability that can be understood from both the IT operations and IT security organizations. We will focus this discussion on two levels.

Level 1 will discuss a generalized Capability Maturity Model that we would need to apply to enable continuous monitoring for a single process, team, or capability.

Level 2 will discuss how we will build from level 1 with the integration of continuous monitoring into the targeted process, team, or capability.

Bear in mind that we cannot go and review every item that should and could be continuously monitored as that is not the point of this text. That may be a topic for another book.

So, let's begin with how we can start understanding how to get IT operations and IT security to work together to monitor the enterprise.