NIST SP 800-53 Rev 5 MODERATE
CM Configuration Management

NIST SP 800-53 Rev 5 MODERATE CM-8(3): Automated Unauthorized Component Detection

Employ automated mechanisms to detect unauthorized components at FedRAMP-defined frequency; HIGH only continuous.

What else in your programme already covers this

This control maps to 33 controls across 14 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

CIS Controls v8 · 6 controls

  • CIS-1.2 Address Unauthorized Assets
  • CIS-1.3 Utilize an Active Discovery Tool
  • CIS-1.5 Use a Passive Asset Discovery Tool
  • CIS-13.3 Deploy a Network Intrusion Detection Solution
  • CIS-13.6 Collect Network Traffic Flow Logs
  • CIS-2.4 Utilize Automated Software Inventory Tools

ISO 27001:2022 · 4 controls

  • 5.9 Inventory of information and other associated assets
  • 8.16 Monitoring activities
  • 8.7 Protection against malware
  • 8.9 Configuration management

NIST SP 800-53 Rev 5 · 4 controls

  • NIST800-CA-7 Continuous monitoring
  • NIST800-CM-8 System component inventory
  • NIST800-SC-35 External Malicious Code Identification. Include system components that proactively seek to identify network-based malicious code or malicious websites
  • NIST800-SI-4 System monitoring

PCI DSS 4.0 · 4 controls

  • 1.2.5 Services, protocols, ports inventoried and justified
  • 11.2.1 Wireless AP detection
  • 11.5.1 IDS/IPS in place
  • 11.5.2 Change detection mechanism (FIM)

SOC 2 · 4 controls

  • SOC2-CC5.2 COSO principle 11: Selects and develops general controls over technology
  • SOC2-CC6.8 Controls to prevent or detect unauthorized or malicious software
  • SOC2-CC7.1 Detection and monitoring procedures for security events are in place
  • SOC2-CC7.2 Monitors system components for anomalies indicating malicious acts

Azure Security Benchmark · 2 controls

  • AM-2 Use only approved services
  • ASBv3-AM-1 Track asset inventory and their risks

ISO 27002:2022 · 2 controls

  • 5.9 Inventory of information and other associated assets
  • 8.19 Installation of software on operational systems

ACSC Essential Eight · 1 control

ANSSI Guide d'hygiene informatique (42 mesures, v2.0) · 1 control

  • ANSSI-HYG-07 Authorise Network Connection Only for Managed Equipment

CMMC 2.0 · 1 control

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 1 control

NIST Cybersecurity Framework 2.0 · 1 control

  • NIST-CSF-DE.CM-09 Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events

NIST SP 800-171 Rev 3 · 1 control

NIST SP 800-172 · 1 control

  • 3.4.2e Automated Detection and Remediation of Unauthorized Software

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in CM Configuration Management

Query this from an agent

The graph holds this control, the 33 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-53 Rev 5 MODERATE controls