CIS CIS This memo documents the Security Automation and Continuous Monitoring (SACM) architecture to be used by SACM participants when crafting SACM-related solutions. The SACM architecture is predicated upon information gleaned from SACM Use Cases and Requirements ([RFC7632] and [RFC8248] respectively) and terminology as found in [I-D.ietf-sacm-terminology].