CM-6(1): Automated Management, Application, and Verification
Control Family:
Parent Control:
CSF v1.1 References:
Baselines:
- High
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- CM-6(1): Automated Central Management / Application / Verification
Control Statement
Manage, apply, and verify configuration settings for [Assignment: organization-defined system components] using [Assignment: organization-defined automated mechanisms].
Supplemental Guidance
Automated tools (e.g., hardening tools, baseline configuration tools) can improve the accuracy, consistency, and availability of configuration settings information. Automation can also provide data aggregation and data correlation capabilities, alerting mechanisms, and dashboards to support risk-based decision-making within the organization.