CM-3(5): Automated Security Response

CSF v1.1 References:

Baselines:

(Not part of any baseline)

Previous Version:

Control Statement

Implement the following security responses automatically if baseline configurations are changed in an unauthorized manner: [Assignment: organization-defined security responses].

Supplemental Guidance

Automated security responses include halting selected system functions, halting system processing, and issuing alerts or notifications to organizational personnel when there is an unauthorized modification of a configuration item.