ITL Bulletin: Continuous Monitoring of Information Security: An Essential Component of Risk Management (October 2011)