NIST SP 800-128
NIST SP 800-128: Information Security Policies

NIST SP 800-128 SP800-128-PH-CONTROL: SecCM Phase: Controlling Configuration Changes

Manage changes to the baseline configuration through an analyzed, documented, and approved change control process.

Other controls in NIST SP 800-128: Information Security Policies

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.