ComplianceNIST 800-53 enhancement

NIST-CM-2(2) Automation Support for Accuracy and Currency

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
CM Configuration Management
Control
CM-2(2)

Control statement

Maintain the currency, completeness, accuracy, and availability of the baseline configuration of the system using [Assignment: automated mechanisms].

Discussion

Automated mechanisms that help organizations maintain consistent baseline configurations for systems include configuration management tools, hardware, software, firmware inventory tools, and network management tools. Automated tools can be used at the organization level, mission and business process level, or system level on workstations, servers, notebook computers, network components, or mobile devices. Tools can be used to track version numbers on operating systems, applications, types of software installed, and current patch levels. Automation support for accuracy and currency can be satisfied by the implementation of [CM-8(2)](#cm-8.2) for organizations that combine system component inventory and baseline configuration activities.

Related

Enhancement of · Compliance (1)

  • NIST-CM-2 Baseline Configuration NIST 800-53 control

Related control · Compliance (3)

  • NIST-CM-7 Least Functionality NIST 800-53 control
  • NIST-IA-3 Device Identification and Authentication NIST 800-53 control
  • NIST-RA-5 Vulnerability Monitoring and Scanning NIST 800-53 control