GAO Study Reveals: Government Faces Challenges with Continuous Monitoring

The document summarizes a GAO assessment of four federal agencies’ cloud security practices, highlighting significant gaps in continuous risk monitoring (only 20% fully covered) and associated risks to confidentiality, integrity, and availability. It then promotes Wiz’s Cloud Native Application Protection Platform (CNAPP) as a means to automate continuous risk and compliance monitoring—covering misconfigurations, identity/network exposure, secrets, and malware—while providing risk prioritization and compliance reporting aligned with standards such as NIST, MITRE, and FedRAMP.