U.S. Army Cyber Command operates and defends Army networks and delivers cyberspace effects against adversaries to defend the nation with over 16,500 Soldiers, civilians, and contractors working 24/7 across the globe. In today's rapidly evolving threat landscape, we recognize the importance of continuous monitoring as a foundational component of our cyberspace security ecosystem. The Army requires the ability to automatically and continuously monitor systems to maintain ongoing awareness of information security, vulnerabilities, and threats to facilitate risk-based, operational decision making. Automation is required to analyze the high volume and variety of data elements associated with successful continuous monitoring. Because of functional drift, monitored systems analytic thresholds and weights must be automatically updated to reduce the likelihood of false positive alert notifications, and accurate indication of anomalous or malicious cyber activity.

See attachment for more information.