💼 CM-5 ACCESS RESTRICTIONS FOR CHANGE

• Contextual name: 💼 CM-5 ACCESS RESTRICTIONS FOR CHANGE
• ID: /frameworks/nist-sp-800-53-r4/cm/05
• Located in: 💼 CM CONFIGURATION MANAGEMENT

Description

The organization defines, documents, approves, and enforces physical and logical access restrictions associated with changes to the information system.

Similar

• Internal
  • ID: dec-c-faa17b7e

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 NIST CSF v1.1 → 💼 PR.IP-1: A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles (e.g. concept of least functionality)		4	14

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags
💼 CM-5 (1) AUTOMATED ACCESS ENFORCEMENT _ AUDITING
💼 CM-5 (2) REVIEW SYSTEM CHANGES
💼 CM-5 (3) SIGNED COMPONENTS
💼 CM-5 (4) DUAL AUTHORIZATION
💼 CM-5 (5) LIMIT PRODUCTION _ OPERATIONAL PRIVILEGES
💼 CM-5 (6) LIMIT LIBRARY PRIVILEGES
💼 CM-5 (7) AUTOMATIC IMPLEMENTATION OF SECURITY SAFEGUARDS