NIST SP 800-53 Revision 5.1 HIGH

CM Configuration Management

NIST SP 800-53 Revision 5.1 HIGH CM-3(1): Automated Documentation, Notification, and Prohibition

Use automated mechanisms to document, notify approvers, and prohibit changes until approved.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in CM Configuration Management

CM-1 Policy and Procedures
CM-10 Software Usage Restrictions
CM-11 User-Installed Software
CM-12 Information Location. a. Identify and document the location of [Assignment: organization-defined information] and the specific system components on which the information is processed and stored; b. Identify and document the users who have access
CM-12(1) Information Location | Automated Tools to Support Information Location. Use automated tools to identify [Assignment: organization-defined information by information type] on [Assignment: organization-defined system components] to ensure controls are in place to protect organizational
CM-2 Baseline Configuration
CM-2(2) Automation Support for Accuracy and Currency
CM-2(3) Retention of Previous Configurations

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-53 Revision 5.1 HIGH controls