NIST SP 800-53 Rev 5 MODERATE

CM Configuration Management

NIST SP 800-53 Rev 5 MODERATE CM-11: User-Installed Software

Establish policies governing installation of software by users; enforce; monitor compliance.

Other controls in CM Configuration Management

CM-1 Policy and Procedures
CM-10 Software Usage Restrictions
CM-12 Information Location. a. Identify and document the location of [Assignment: organization-defined information] and the specific system components on which the information is processed and stored; b. Identify and document the users who have access
CM-12(1) Information Location | Automated Tools to Support Information Location. Use automated tools to identify [Assignment: organization-defined information by information type] on [Assignment: organization-defined system components] to ensure controls are in place to protect organizational
CM-2 Baseline Configuration
CM-2(2) Automation Support for Accuracy and Currency
CM-2(3) Retention of Previous Configurations
CM-2(7) Configure Systems and Components for High-Risk Areas

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-53 Rev 5 MODERATE controls