What does FedRAMP continuous monitoring include?

“Continuous monitoring (ConMon) is the ongoing operating work after readiness: vulnerability management, configuration monitoring, incident handling, change impact analysis, evidence collection, and reporting aligned to the authorization path. MARFI helps design and operate that loop so the service stays reviewable as it changes.”