ISO 20000-1 10: Configuration management

What else in your programme already covers this

This control maps to 83 controls across 45 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ASD Strategies to Mitigate Cyber Security Incidents · 3 controls

ASD37-04 User application hardening (Essential)
ASD37-10 Server application hardening (Very Good)
ASD37-11 Operating system hardening (Very Good)

BSI IT-Grundschutz · 3 controls

BSI-23 Baseline configuration establishment
BSI-24 Configuration change control
BSI-26 System component inventory

NIST SP 800-53 Rev 5 · 3 controls

NIST800-CM-4 Impact analyses
NIST800-CM-9 Configuration management plan
NIST800-SA-10 Developer configuration management

API 1164 · 2 controls

API1164-14 Physical Security
API1164-22 Configuration management for OT systems

IEC 62304:2015 Medical Device Software Lifecycle Processes · 2 controls

IEC62304-4.1 Quality Management System
IEC62304-5.1 Software Development Planning

IEC 62443 · 2 controls

IEC62443-14 System security hardening
IEC62443-22 Configuration management for OT systems

ISO 27017 · 2 controls

ISO27017-19 Image and template hardening
ISO27017-20 Cloud configuration management

ISO 27018 · 2 controls

ISO27018-19 Image and template hardening
ISO27018-20 Cloud configuration management

ISO 27019 · 2 controls

ISO27019-14 System security hardening
ISO27019-22 Configuration management for OT systems

NIST SP 1800-32 · 2 controls

NIST1800-32-14 System security hardening
NIST1800-32-22 Configuration management for OT systems

NIST SP 800-145 · 2 controls

NISTSP145-7 Cloud Procurement Standards Aligned to NIST SP 800-145 Definition
NISTSP145-8 Governance, Reporting, and Stakeholder Education on Cloud Definition

NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements · 2 controls

FEDRAMP-CM-1 Configuration Management Policy
FEDRAMP-CM-2 Baseline Configuration

NIST SP 800-190 · 2 controls

NIST190-19 Image and template hardening
NIST190-20 Cloud configuration management

NIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security · 2 controls

NISTSP82-1 OT Security Program Governance, Policy, Roles, and Safety-Security Integration
NISTSP82-5 OT Configuration Management, Patching, Vulnerability Management, and Malware Protection

AS9100D - Aerospace Quality Management System · 1 control

AS9100D-8.1 Operational Planning and Control

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

AWWA-4.3 Configuration Management

Annex 11 to EU GMP - Computerised Systems · 1 control

Clause 10 Change and configuration management

Automotive SPICE (ASPICE) v4.0 - Process Assessment Model · 1 control

SUP.8 Configuration Management

Canada ITSG-33 - IT Security Risk Management · 1 control

CA-ITSG33-SC-01 Security Control Catalogue

FBI CJIS Security Policy · 1 control

CJIS-7 Configuration Management

FFIEC Cybersecurity Assessment Tool (CAT) · 1 control

CAT-D3-3 Corrective controls

FFIEC IT Examination Handbook · 1 control

FFIEC-10 Secure configuration standards

IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1) · 1 control

IAEA-NSS17-SystemIntegrity-Configuration-Change-Management IAEA NSS-17 - System Integrity + Configuration Management + Change Management + Baseline + Hardening

ISO 10007:2017 · 1 control

5.2 Configuration management planning

ISO 26262:2018 - Functional Safety for Road Vehicles · 1 control

ISO-26262-8-7 Configuration management

ISO 27002:2022 · 1 control

8.9 Configuration management

ISO/IEC 27400:2022 · 1 control

27400-6.4 Default Configuration Security

ITIL 4 · 1 control

ITIL4-10 Configuration management

MTCS (Singapore) · 1 control

MTCS-Logging-Monitoring-Compliance-Audit-SLA-Configuration-SIEM-SOAR-Cloud-Monitoring-CSPM MTCS Logging + Monitoring + Compliance + Audit + SLA + Configuration + SIEM + SOAR + CSPM

Monetary Authority of Singapore Technology Risk Management Guidelines · 1 control

MAS-TRM-Access-Cryptography-Network-Security-Chapters-9-10-MFA-PKI-Encryption-Network-Segmentation MAS TRM Access Control + Cryptography + Network + Chapters 9-10 + MFA + PKI + Encryption + Network Segmentation

NERC CIP · 1 control

NERCCIP-5 System Security Management + Configuration Change Management and Vulnerability Assessments (CIP-007 + CIP-010)

NIST Cybersecurity Framework 2.0 · 1 control

NIST-CSF-PR.PS-01 Configuration management practices are established and applied

NIST Privacy Framework · 1 control

NISTPF-8 Protect-P Information Protection Processes (PR.PO-P)

NIST SP 800-144 · 1 control

NISTSP144-7 Cloud Workload Protection, Containers, Serverless, and Configuration

NIST SP 800-146 · 1 control

NISTSP146-4 IaaS Operational Recommendations and Workload Hardening

NRC 10 CFR 73.54 - Nuclear Facility Cybersecurity · 1 control

RG5.71-C.6 Configuration Management

OSFI B-13 · 1 control

OSFIB13-3 Cyber Security: Identification, Protection, Detection, Response, Recovery

Oman National Cybersecurity Framework · 1 control

OMANCS-5 Network, Endpoint, System Development, and Configuration Security

Open Banking Security · 1 control

OPENBANK-3 Mutual TLS, Token Binding, Request Signing (JWS), Key Management

PCI P2PE · 1 control

PCI-P2PE-10 Secure configuration standards

PCI PIN Security · 1 control

PCI-PIN-10 Secure configuration standards

PCI SSF · 1 control

PCI-SSF-10 Secure configuration standards

PSD2 SCA · 1 control

PSDTWO-2 SCA Exemptions and Risk-Based Authentication

Secure by Design: A Guide for Manufacturers (CISA) · 1 control

CISABD-1 Take Ownership of Customer Security Outcomes

South Korea ISMS-P · 1 control

ISMSP-SYS-01 System Hardening and Patch Management

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.