Ensure that a. continuous monitoring information provided by the PMO or the CSP, as appropriate, is obtained and reviewed in a timely manner for all FedRAMP cloud systems used by the Bureau. b. for any gaps identified, including for incident response and contingency testing, a risk assessment is performed to determine appropriate responses.