NIST SP 800-128
Controlling Configuration Changes

NIST SP 800-128 SecCM-CHANGE-6: Automated Change Control Tools

Use automated tools such as configuration management databases, version control systems, and SCAP-enabled scanners to enforce change workflows, detect unauthorized changes, and record an audit trail of all configuration modifications.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Controlling Configuration Changes

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-128 controls