Skip to main content

💼 CM-6 Configuration Settings

  • Contextual name: 💼 CM-6 Configuration Settings
  • ID: /frameworks/nist-sp-800-53-r5/cm/06
  • Located in: 💼 CM Configuration Management

Description​

a. Establish and document configuration settings for components employed within the system that reflect the most restrictive mode consistent with operational requirements using [Assignment: organization-defined common secure configurations]; b. Implement the configuration settings; c. Identify, document, and approve any deviations from established configuration settings for [Assignment: organization-defined system components] based on [Assignment: organization-defined operational requirements]; and d. Monitor and control changes to the configuration settings in accordance with organizational policies and procedures.

Similar​

  • Internal
    • ID: dec-c-3ceaf422

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 FedRAMP High Security Controls → 💼 CM-6 Configuration Settings (L)(M)(H)21
💼 FedRAMP Low Security Controls → 💼 CM-6 Configuration Settings (L)(M)(H)
💼 NIST CSF v2.0 → 💼 DE.CM-09: Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events89

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 CM-6(1) Configuration Settings _ Automated Management, Application, and Verification1
💼 CM-6(2) Configuration Settings _ Respond to Unauthorized Changes
💼 CM-6(3) Configuration Settings _ Unauthorized Change Detection
💼 CM-6(4) Configuration Settings _ Conformance Demonstration