NIST SP 800-128
Monitoring

NIST SP 800-128 SecCM-MONITOR-5: Unauthorized Change Detection

Detect and respond to unauthorized configuration changes through file integrity monitoring, registry monitoring, change correlation with approved tickets, and alerting on deviations not tied to an approved change record.

Other controls in Monitoring

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.