--- sourceDocument: Australia Governance, Risk, and Compliance sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/governance-risk-compliance Release : - australia ft:locale : - de-DE ft:publication_title : - Australia Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # Continuous Authorization and Monitoring # Continuous Authorization and Monitoring {#ariaid-title1} * Freigeben Version: Australia * * Aktualisiert 12. März 2026 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 Minuten Lesedauer Continuous Authorization and Monitoring (CAM) employs the seven steps defined by the NIST Risk Management Framework (RMF) to allow you to make better-informed decisions about your security posture. The video gives you an overview of the seven steps of the Risk Management Framework mandated by the US government for federal agencies that help companies to identify and eliminate risks to their infrastructure. ## Get started {#grc-cam-landing-page__cf-app-landing-get-started} |-|-| | [Explore The CAM application applies a standardized approach to automating NIST's Risk Management Framework (RMF).](https://servicenow-prod.fluidtopics.net/K9B5mBTuF0_NueOevn9LpA "Learn about the CAM benefits and workflows for users.") | [Configure Follow the steps in the checklist to download CAM from the ServiceNow Store and get it ready for operation.](https://servicenow-prod.fluidtopics.net/Wf7T49ThTyLwrDqVWIPaHw "Follow the steps in the checklist to download CAM from the ServiceNow Store and get it ready for operation.") | | [RMF Step 1 - Prepare In the Prepare step, you set up authorization boundaries, control overlays, and information types, as well as create the actual authorization package.](https://servicenow-prod.fluidtopics.net/4_QuOxUZATww3iyBzS2I_w "In the Prepare step, you set up authorization boundaries, control overlays, and information types, as well as create the actual authorization package.") | [RMF step 2 - Categorize In the Categorize step, you define the criticality or sensitivity of your information system according to potential worst-case scenarios.](https://servicenow-prod.fluidtopics.net/SVVw2bf~v8d5cbDVPgTWDA "In the Categorize step, you define the criticality or sensitivity of your information system according to potential worst-case scenarios. This involves selecting NIST information types for the package and using the information types to define the impact levels for the package.") | | [RMF step 3 - Select controls When the impact levels for the package have been approved, it is time to select baseline controls.](https://servicenow-prod.fluidtopics.net/3dnUvnkrxGaTc3sBTQhp5Q "When the impact levels for the package have been approved, it is time to select baseline controls.") | [RMF step 4 - Implement controls After you have selected controls for implementation and performed any of the possible actions on them, you can implement the controls.](https://servicenow-prod.fluidtopics.net/CxKn4ua6mHqHMGCs5OUg6A "After you have selected controls for implementation and performed any of the possible actions on them, you can implement the controls.") | | [RMF steps 5, 6, and 7After you have implemented controls, you can assess internal and external controls, generate Plans of Action and Milestones (POA\&M), and manage change requests and vulnerable items.](https://servicenow-prod.fluidtopics.net/qK3DGfjtjUox1hZYv7VpUA "After you have implemented controls, you can assess internal and external controls, generate Plans of Action and Milestones (POA&M), and manage change requests and vulnerable items.") | [Implementing controls and assessment objectives NIST 800-53A -- assessment objectives are included in the base system with the CAM application. The assessment objectives are mapped to revision 5 control objectives.](https://servicenow-prod.fluidtopics.net/sWYWsQxPOeXNDKz2uTZ5yw "NIST 800-53A – assessment objectives are included in the base system with the CAM application. The assessment objectives are mapped to revision 5 control objectives.") | | [Monitoring and managing The CAM Workspace is a centralized hub where you can continuously monitor and manage compliance with the NIST Risk Management Framework to ensure adherence to your security policies and guidelines.](https://servicenow-prod.fluidtopics.net/_ywdGi7FLKaoh3y7oroWUA "The CAM Workspace is a centralized hub where you can continuously monitor and manage compliance with the NIST Risk Management Framework to ensure adherence to your security policies and guidelines.") | [Reference Reference topics provide the detailed descriptions of tables, properties, forms, and roles that are installed with the CAM application.](https://servicenow-prod.fluidtopics.net/gv_8wG3kAKp00WTJ8RFmGw "Reference topics provide the detailed descriptions of tables, properties, forms, and roles that are installed with the CAM application.") | [ ] {#grc-cam-landing-page__table_urw_xls_hcc} ## Request apps on the Store {#grc-cam-landing-page__section_parent-topic-send-to-store} Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://docs.servicenow.com/bundle/store-release-notes/page/release-notes/store/sn-store-release-notes.html).{#grc-cam-landing-page__inline-send-to-store} The Continuous Authorization and Monitoring (com.sn_irm_cont_auth_monitor) plugin is available as a separate subscription and requires activation. ## Troubleshoot and get help {#grc-cam-landing-page__cf-app-landing-get-help} * [Ask questions and explore other resources for Continuous Authorization and Monitoring in the ServiceNow Community](https://www.servicenow.com/community/) * [Search the Known Error Portal for known error articles](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0597477) * [Contact Customer Service and Support](https://support.servicenow.com/now) {#grc-cam-landing-page__ul_qqr_sgj_jcc}