CM-6(1): Automated Management, Application, and Verification
CSF v1.1 References:
- NIST Special Publication 800-53 Revision 4:
- CM-6(1): Automated Central Management / Application / Verification
Manage, apply, and verify configuration settings for [Assignment: organization-defined system components] using [Assignment: organization-defined automated mechanisms].
Automated tools (e.g., hardening tools, baseline configuration tools) can improve the accuracy, consistency, and availability of configuration settings information. Automation can also provide data aggregation and data correlation capabilities, alerting mechanisms, and dashboards to support risk-based decision-making within the organization.