CM-3(5): Automated Security Response

Control Family:

Configuration Management

Parent Control:

CM-3: Configuration Change Control

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

PR.IP-1
PR.IP-3
DE.CM-1
DE.CM-7

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5.2.0:
CM-3(5): Automated Security Response

Control Statement

The information system implements [Assignment: organization-defined security responses] automatically if baseline configurations are changed in an unauthorized manner.

Supplemental Guidance

Security responses include, for example, halting information system processing, halting selected system functions, or issuing alerts/notifications to organizational personnel when there is an unauthorized modification of a configuration item.