ComplianceNIST 800-53 enhancement
NIST-CM-3(1) Automated Documentation, Notification, and Prohibition of Changes
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- CM Configuration Management
- Control
- CM-3(1)
Control statement
Use [Assignment: automated mechanisms] to:
(a) Document proposed changes to the system;
(b) Notify [Assignment: approval authorities] of proposed changes to the system and request change approval;
(c) Highlight proposed changes to the system that have not been approved or disapproved within [Assignment: time period];
(d) Prohibit changes to the system until designated approvals are received;
(e) Document all changes to the system; and
(f) Notify [Assignment: personnel] when approved changes to the system are completed.
Discussion
None.
Related
Enhancement of · Compliance (1)
- NIST-CM-3 Configuration Change Control NIST 800-53 control