NIST SP 800-53 Revision 5.1 HIGH

CM Configuration Management

NIST SP 800-53 Revision 5.1 HIGH CM-7(5): Authorized Software Allow-by-Exception

Identify and maintain authorized software list; employ allowlist; review at least annually; HIGH requirement.

Other controls in CM Configuration Management

CM-1 Policy and Procedures
CM-10 Software Usage Restrictions
CM-11 User-Installed Software
CM-12 Information Location. a. Identify and document the location of [Assignment: organization-defined information] and the specific system components on which the information is processed and stored; b. Identify and document the users who have access
CM-12(1) Information Location | Automated Tools to Support Information Location. Use automated tools to identify [Assignment: organization-defined information by information type] on [Assignment: organization-defined system components] to ensure controls are in place to protect organizational
CM-2 Baseline Configuration
CM-2(2) Automation Support for Accuracy and Currency
CM-2(3) Retention of Previous Configurations

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-53 Revision 5.1 HIGH controls