Automotive SPICE (ASPICE) v4.0 - Process Assessment Model SUP.8: Configuration Management

What else in your programme already covers this

This control maps to 66 controls across 31 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ASD Strategies to Mitigate Cyber Security Incidents · 3 controls

ASD37-04 User application hardening (Essential)
ASD37-10 Server application hardening (Very Good)
ASD37-11 Operating system hardening (Very Good)

BSI IT-Grundschutz · 3 controls

BSI-23 Baseline configuration establishment
BSI-24 Configuration change control
BSI-26 System component inventory

NIST SP 800-53 Rev 5 · 3 controls

NIST800-CM-4 Impact analyses
NIST800-CM-9 Configuration management plan
NIST800-SA-10 Developer configuration management

API 1164 · 2 controls

API1164-14 Physical Security
API1164-22 Configuration management for OT systems

IEC 62304:2015 Medical Device Software Lifecycle Processes · 2 controls

IEC62304-4.1 Quality Management System
IEC62304-5.1 Software Development Planning

IEC 62443 · 2 controls

IEC62443-14 System security hardening
IEC62443-22 Configuration management for OT systems

ISO 27017 · 2 controls

ISO27017-19 Image and template hardening
ISO27017-20 Cloud configuration management

ISO 27018 · 2 controls

ISO27018-19 Image and template hardening
ISO27018-20 Cloud configuration management

ISO 27019 · 2 controls

ISO27019-14 System security hardening
ISO27019-22 Configuration management for OT systems

NIST SP 1800-32 · 2 controls

NIST1800-32-14 System security hardening
NIST1800-32-22 Configuration management for OT systems

NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements · 2 controls

FEDRAMP-CM-1 Configuration Management Policy
FEDRAMP-CM-2 Baseline Configuration

NIST SP 800-190 · 2 controls

NIST190-19 Image and template hardening
NIST190-20 Cloud configuration management

AS9100D - Aerospace Quality Management System · 1 control

AS9100D-8.1 Operational Planning and Control

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

AWWA-4.3 Configuration Management

Annex 11 to EU GMP - Computerised Systems · 1 control

Clause 10 Change and configuration management

Canada ITSG-33 - IT Security Risk Management · 1 control

CA-ITSG33-SC-01 Security Control Catalogue

FBI CJIS Security Policy · 1 control

CJIS-7 Configuration Management

FFIEC Cybersecurity Assessment Tool (CAT) · 1 control

CAT-D3-3 Corrective controls

FFIEC IT Examination Handbook · 1 control

FFIEC-10 Secure configuration standards

ISO 10007:2017 · 1 control

5.2 Configuration management planning

ISO 20000-1 · 1 control

ISO20000-10 Configuration management

ISO 26262:2018 - Functional Safety for Road Vehicles · 1 control

ISO-26262-8-7 Configuration management

ISO 27002:2022 · 1 control

8.9 Configuration management

ISO/IEC 27400:2022 · 1 control

27400-6.4 Default Configuration Security

ITIL 4 · 1 control

ITIL4-10 Configuration management

NIST Cybersecurity Framework 2.0 · 1 control

NIST-CSF-PR.PS-01 Configuration management practices are established and applied

NRC 10 CFR 73.54 - Nuclear Facility Cybersecurity · 1 control

RG5.71-C.6 Configuration Management

PCI P2PE · 1 control

PCI-P2PE-10 Secure configuration standards

PCI PIN Security · 1 control

PCI-PIN-10 Secure configuration standards

PCI SSF · 1 control

PCI-SSF-10 Secure configuration standards

South Korea ISMS-P · 1 control

ISMSP-SYS-01 System Hardening and Patch Management

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.