💼 CM-5 ACCESS RESTRICTIONS FOR CHANGE
- ID:
/frameworks/nist-sp-800-53-r4/cm/05
Description​
The organization defines, documents, approves, and enforces physical and logical access restrictions associated with changes to the information system.
Similar​
- Internal
- ID:
dec-c-faa17b7e
- ID:
Similar Sections (Give Policies To)​
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|---|---|---|---|---|
| 💼 NIST CSF v1.1 → 💼 PR.IP-1: A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles (e.g. concept of least functionality) | 4 | 26 | no data |
Sub Sections​
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|---|---|---|---|---|
| 💼 CM-5 (1) AUTOMATED ACCESS ENFORCEMENT _ AUDITING | no data | ||||
| 💼 CM-5 (2) REVIEW SYSTEM CHANGES | no data | ||||
| 💼 CM-5 (3) SIGNED COMPONENTS | no data | ||||
| 💼 CM-5 (4) DUAL AUTHORIZATION | no data | ||||
| 💼 CM-5 (5) LIMIT PRODUCTION _ OPERATIONAL PRIVILEGES | no data | ||||
| 💼 CM-5 (6) LIMIT LIBRARY PRIVILEGES | no data | ||||
| 💼 CM-5 (7) AUTOMATIC IMPLEMENTATION OF SECURITY SAFEGUARDS | no data |