Skip to main content

πŸ’Ό CM-8(3) Automated Unauthorized Component Detection (M)(H)

  • Contextual name: πŸ’Ό CM-8(3) Automated Unauthorized Component Detection (M)(H)
  • ID: /frameworks/fedramp-moderate-security-controls/cm/08/03
  • Located in: πŸ’Ό CM-8 System Component Inventory (L)(M)(H)

Description​

(a) Detect the presence of unauthorized hardware, software, and firmware components within the system using [FedRAMP Assignment: automated mechanisms with a maximum five-minute delay in detection]; and [FedRAMP Assignment: continuously]

(b) Take the following actions when unauthorized components are detected: [Selection (one-or-more): disable network access by such components; isolate the components; notify [Assignment: organization-defined personnel or roles]].

Similar​

  • Sections
    • /frameworks/fedramp-high-security-controls/cm/08/03
  • Internal
    • ID: dec-c-02513d7f

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό FedRAMP High Security Controls β†’ πŸ’Ό CM-8(3) Automated Unauthorized Component Detection (M)(H)

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags