ComplianceNIST 800-53 enhancement

NIST-CM-3(7) Review System Changes

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
CM Configuration Management
Control
CM-3(7)

Control statement

Review changes to the system [Assignment: frequency] or when [Assignment: circumstances] to determine whether unauthorized changes have occurred.

Discussion

Indications that warrant a review of changes to the system and the specific circumstances justifying such reviews may be obtained from activities carried out by organizations during the configuration change process or continuous monitoring process.

Related

Enhancement of · Compliance (1)

  • NIST-CM-3 Configuration Change Control NIST 800-53 control

Related control · Compliance (3)

  • NIST-AU-6 Audit Record Review, Analysis, and Reporting NIST 800-53 control
  • NIST-AU-7 Audit Record Reduction and Report Generation NIST 800-53 control
  • NIST-CM-3 Configuration Change Control NIST 800-53 control