NIST SP 800-53 Revision 5.1 HIGH CM-5(1): Access Restrictions for Change | Automated Access Enforcement and Audit Records. (a) Enforce access restrictions using [Assignment: organization-defined automated mechanisms]; and (b) Automatically generate audit records of the enforcement actions

Access Restrictions for Change | Automated Access Enforcement and Audit Records. (a) Enforce access restrictions using [Assignment: organization-defined automated mechanisms]; and (b) Automatically generate audit records of the enforcement actions

Other controls in CM Configuration Management

CM-1 Policy and Procedures
CM-10 Software Usage Restrictions
CM-11 User-Installed Software
CM-12 Information Location. a. Identify and document the location of [Assignment: organization-defined information] and the specific system components on which the information is processed and stored; b. Identify and document the users who have access
CM-12(1) Information Location | Automated Tools to Support Information Location. Use automated tools to identify [Assignment: organization-defined information by information type] on [Assignment: organization-defined system components] to ensure controls are in place to protect organizational
CM-2 Baseline Configuration
CM-2(2) Automation Support for Accuracy and Currency
CM-2(3) Retention of Previous Configurations

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-53 Revision 5.1 HIGH controls