💼 CM-8(3) Automated Unauthorized Component Detection (M)(H)

• ID: /frameworks/fedramp-moderate-security-controls/cm/08/03

Description

(a) Detect the presence of unauthorized hardware, software, and firmware components within the system using [FedRAMP Assignment: automated mechanisms with a maximum five-minute delay in detection]; and [FedRAMP Assignment: continuously]

(b) Take the following actions when unauthorized components are detected: [Selection (one-or-more): disable network access by such components; isolate the components; notify [Assignment: organization-defined personnel or roles]].

Similar

• Sections
  • /frameworks/fedramp-high-security-controls/cm/08/03
• Internal
  • ID: dec-c-02513d7f

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 FedRAMP High Security Controls → 💼 CM-8(3) Automated Unauthorized Component Detection (M)(H)			1		no data

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance

Policies (1)

Policy	Logic Count	Flags	Compliance
🛡️ AWS GuardDuty is not enabled in all regions🟢	1	🟢 x6	no data