NIST SP 800-128
Monitoring

NIST SP 800-128 SecCM-MONITOR-2: Configuration Drift Detection

What does SecCM-MONITOR-2 require?

Compare actual system configurations against approved baselines on a defined cadence to identify drift, unauthorized changes, or degradation of secure settings, and feed findings into incident response and remediation workflows.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Monitoring

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-128 controls