NIST SP 800-137
E709111
NIST SP 800-137 is a NIST cybersecurity guideline that provides a framework for implementing information security continuous monitoring (ISCM) for federal information systems and organizations.
All labels observed (1)
| Label | Occurrences |
|---|---|
| NIST SP 800-137 canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T7934744 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: NIST SP 800-137 Context triple: [NIST SP 800 series, includes, NIST SP 800-137]
-
A.
NIST SP 800-160
NIST SP 800-160 is a National Institute of Standards and Technology cybersecurity engineering guideline that provides systems security engineering principles and practices for developing trustworthy, secure systems.
-
B.
NIST SP 800-115
NIST SP 800-115 is a National Institute of Standards and Technology guideline that provides a technical framework and best practices for conducting information security testing and assessments.
-
C.
NIST SP 800-67
NIST SP 800-67 is a NIST Special Publication that provides technical guidance and recommendations for the use and implementation of the Triple Data Encryption Algorithm (TDEA/3DES) in federal information systems.
-
D.
NIST SP 800-122
NIST SP 800-122 is a NIST cybersecurity guidance document that provides recommendations for protecting the confidentiality of personally identifiable information (PII).
-
E.
NIST SP 800-82
NIST SP 800-82 is a NIST cybersecurity guidance document focused on securing industrial control systems and operational technology environments.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: NIST SP 800-137 Target entity description: NIST SP 800-137 is a NIST cybersecurity guideline that provides a framework for implementing information security continuous monitoring (ISCM) for federal information systems and organizations.
-
A.
NIST SP 800-160
NIST SP 800-160 is a National Institute of Standards and Technology cybersecurity engineering guideline that provides systems security engineering principles and practices for developing trustworthy, secure systems.
-
B.
NIST SP 800-115
NIST SP 800-115 is a National Institute of Standards and Technology guideline that provides a technical framework and best practices for conducting information security testing and assessments.
-
C.
NIST SP 800-67
NIST SP 800-67 is a NIST Special Publication that provides technical guidance and recommendations for the use and implementation of the Triple Data Encryption Algorithm (TDEA/3DES) in federal information systems.
-
D.
NIST SP 800-122
NIST SP 800-122 is a NIST cybersecurity guidance document that provides recommendations for protecting the confidentiality of personally identifiable information (PII).
-
E.
NIST SP 800-82
NIST SP 800-82 is a NIST cybersecurity guidance document focused on securing industrial control systems and operational technology environments.
- F. None of above. chosen
Statements (46)
| Predicate | Object |
|---|---|
| instanceOf |
NIST Special Publication
ⓘ
cybersecurity guideline ⓘ information security standard ⓘ |
| abbreviation | SP 800-137 NERFINISHED ⓘ |
| addresses |
analysis and reporting of security information
ⓘ
automation of security monitoring ⓘ data collection for security status ⓘ |
| aimsTo |
enable timely risk response
ⓘ
improve visibility into organizational security posture ⓘ |
| appliesTo |
federal information security programs
ⓘ
federal information systems ⓘ federal organizations ⓘ |
| defines |
ISCM metrics and reporting concepts
ⓘ
ISCM process ⓘ ISCM roles and responsibilities ⓘ |
| documentType | guideline ⓘ |
| focusesOn | Information Security Continuous Monitoring (ISCM) ⓘ |
| geographicScope | United States federal government NERFINISHED ⓘ |
| governingDomain |
cybersecurity
ⓘ
information assurance ⓘ risk management ⓘ |
| hasAcronym | ISCM NERFINISHED ⓘ |
| intendedAudience |
federal agencies
ⓘ
information security program managers ⓘ information system owners ⓘ senior agency information security officers ⓘ |
| issuedBy | U.S. Department of Commerce NERFINISHED ⓘ |
| language | English ⓘ |
| medium | technical report ⓘ |
| objective |
maintain ongoing awareness of information security
ⓘ
support risk management decisions ⓘ |
| partOfSeries | NIST Special Publication 800 series NERFINISHED ⓘ |
| providesFrameworkFor | implementing ISCM ⓘ |
| providesGuidanceFor |
developing ISCM strategies
ⓘ
implementing ISCM programs ⓘ maintaining ISCM programs ⓘ |
| publisher | National Institute of Standards and Technology NERFINISHED ⓘ |
| relatedTo |
FISMA compliance
ⓘ
NIST Risk Management Framework NERFINISHED ⓘ NIST SP 800-53 NERFINISHED ⓘ |
| subject |
federal information security
ⓘ
federal information systems ⓘ information security continuous monitoring ⓘ |
| supports |
continuous monitoring of security controls
ⓘ
federal information security risk management ⓘ |
| title | Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations NERFINISHED ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: NIST SP 800-137 Description of subject: NIST SP 800-137 is a NIST cybersecurity guideline that provides a framework for implementing information security continuous monitoring (ISCM) for federal information systems and organizations.
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.