NIST 800-53 Rev 5
424 controls available
CM-3(6)high
Cryptography Management
Configuration Management
Control Statement
Ensure that cryptographic mechanisms used to provide the following controls are under configuration management: {{ insert: param, cm-03.06_odp }}.
Discussion
The controls referenced in the control enhancement refer to security and privacy controls from the control catalog. Regardless of the cryptographic mechanisms employed, processes and procedures are in place to manage those mechanisms. For example, if system components use certificates for identification and authentication, a process is implemented to address the expiration of those certificates.
- Framework
- NIST SP 800-53 Rev 5
- Family
- Configuration Management
- Baselines
- high
Related Frameworks
3 paths across 2 frameworks
Related Frameworks
SCF1 mapping
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
CCI2 mappings
CCI-001745
1.00
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001746
1.00
- DISA · 2025-01-23 · disa_cci_list · equivalent
Related STIGs
103 STIGs reach this control through 49 CCIs. Expand a row to see the responsible NICE and O*NET roles.
Operating System - Server
35 STIGs
Operating System - Server
35 STIGsAmazon Linux 2023 Security Technical Implementation Guide
V1R32026-02-273 of 187 findings match
M3
Oracle Linux 7 Security Technical Implementation Guide
32025-05-083 of 243 findings match
M3
Oracle Linux 9 Security Technical Implementation Guide
12025-05-083 of 456 findings match
M3
Oracle Linux 9 Security Technical Implementation Guide
V1R52026-02-173 of 448 findings match
M3
Red Hat Enterprise Linux 9 Security Technical Implementation Guide
22025-05-143 of 450 findings match
M3
Red Hat Enterprise Linux 9 Security Technical Implementation Guide
V2R82026-02-053 of 446 findings match
M3
Oracle Linux 8 Security Technical Implementation Guide
22025-05-132 of 374 findings match
M2
Oracle Linux 8 Security Technical Implementation Guide
V2R82026-02-132 of 375 findings match
M2
Show 27 more STIGs in this category →Hide additional STIGs
Red Hat Enterprise Linux 10 Security Technical Implementation Guide
V1R12026-03-112 of 434 findings match
M2
Red Hat Enterprise Linux 8 Security Technical Implementation Guide
22025-05-142 of 369 findings match
M2
Red Hat Enterprise Linux 8 Security Technical Implementation Guide
V2R72026-02-052 of 366 findings match
M2
SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide
12025-05-082 of 210 findings match
M2
SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide
V1R42026-02-102 of 208 findings match
M2
SUSE Linux Enterprise Server 15 Security Technical Implementation Guide
22025-05-142 of 216 findings match
M2
SUSE Linux Enterprise Server 15 Security Technical Implementation Guide
V2R72026-02-192 of 214 findings match
M2
Anduril NixOS Security Technical Implementation Guide
12024-10-251 of 104 findings match
M1
Anduril NixOS Security Technical Implementation Guide
V1R22025-08-191 of 103 findings match
M1
Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide
22025-05-161 of 187 findings match
M1
Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide
V2R82026-02-061 of 188 findings match
M1
Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide
V1R62026-02-271 of 439 findings match
M1
CloudLinux AlmaLinux OS 9 Security Technical Implementation Guide
12025-05-221 of 445 findings match
M1
General Purpose Operating System Security Requirements Guide
32024-12-041 of 198 findings match
M1
General Purpose Operating System Security Requirements Guide
V3R32025-09-221 of 203 findings match
M1
Microsoft Windows Server 2019 Security Technical Implementation Guide
32025-05-231 of 275 findings match
M1
Microsoft Windows Server 2019 Security Technical Implementation Guide
V3R82026-02-121 of 282 findings match
M1
Microsoft Windows Server 2022 Security Technical Implementation Guide
22025-05-151 of 275 findings match
M1
Microsoft Windows Server 2022 Security Technical Implementation Guide
V2R82026-02-131 of 282 findings match
M1
Microsoft Windows Server 2025 Security Technical Implementation Guide
V1R12026-02-201 of 284 findings match
M1
Solaris 11 SPARC Security Technical Implementation Guide
32025-05-051 of 217 findings match
M1
Solaris 11 SPARC Security Technical Implementation Guide
V3R52026-02-191 of 217 findings match
M1
Solaris 11 X86 Security Technical Implementation Guide
32025-05-051 of 216 findings match
M1
Solaris 11 X86 Security Technical Implementation Guide
V3R52026-02-191 of 216 findings match
M1
SUSE Linux Enterprise Server 12 Security Technical Implementation Guide
32025-05-141 of 211 findings match
M1
Tri-Lab Operating System Stack (TOSS) 4 Security Technical Implementation Guide
22025-05-081 of 226 findings match
M1
Tri-Lab Operating System Stack (TOSS) 4 Security Technical Implementation Guide
V2R52026-02-191 of 226 findings match
M1
Operating System - Mainframe
39 STIGs
Operating System - Mainframe
39 STIGsIBM z/OS ACF2 Security Technical Implementation Guide
92025-06-241 of 226 findings match
M1
IBM z/OS ACF2 Security Technical Implementation Guide
V9R82026-03-091 of 225 findings match
M1
IBM z/OS RACF Security Technical Implementation Guide
92025-06-241 of 224 findings match
M1
IBM z/OS RACF Security Technical Implementation Guide
V9R82026-03-091 of 222 findings match
M1
IBM z/OS TSS Security Technical Implementation Guide
92025-06-241 of 231 findings match
M1
IBM z/OS TSS Security Technical Implementation Guide
V9R82026-03-091 of 230 findings match
M1
IBM zSecure Suite Security Technical Implementation Guide
V1R32025-03-051 of 11 findings match
M1
Mainframe Product Security Requirements Guide
32024-12-051 of 193 findings match
M1
Show 31 more STIGs in this category →Hide additional STIGs
Mainframe Product Security Requirements Guide
V3R42025-09-101 of 194 findings match
M1
z/OS BMC CONTROL-D for ACF2 Security Technical Implementation Guide
72024-12-161 of 7 findings match
M1
z/OS BMC CONTROL-D for ACF2 Security Technical Implementation Guide
V7R22025-09-261 of 7 findings match
M1
z/OS BMC CONTROL-D for RACF Security Technical Implementation Guide
72024-12-161 of 8 findings match
M1
z/OS BMC CONTROL-D for RACF Security Technical Implementation Guide
V7R22025-09-271 of 8 findings match
M1
z/OS BMC CONTROL-D for TSS Security Technical Implementation Guide
V7R22025-09-281 of 9 findings match
M1
z/OS BMC CONTROL-M for ACF2 Security Technical Implementation Guide
72024-12-161 of 8 findings match
M1
z/OS BMC CONTROL-M for ACF2 Security Technical Implementation Guide
V7R22025-09-261 of 8 findings match
M1
z/OS BMC CONTROL-M for RACF Security Technical Implementation Guide
72024-12-161 of 9 findings match
M1
z/OS BMC CONTROL-M for RACF Security Technical Implementation Guide
V7R22025-09-271 of 9 findings match
M1
z/OS BMC CONTROL-O for ACF2 Security Technical Implementation Guide
72025-02-241 of 7 findings match
M1
z/OS BMC CONTROL-O for ACF2 Security Technical Implementation Guide
V7R22025-09-271 of 7 findings match
M1
z/OS BMC CONTROL-O for RACF Security Technical Implementation Guide
72025-02-241 of 8 findings match
M1
z/OS BMC CONTROL-O for RACF Security Technical Implementation Guide
V7R22025-09-271 of 8 findings match
M1
z/OS BMC CONTROL-O for TSS Security Technical Implementation Guide
V7R22025-09-281 of 9 findings match
M1
z/OS BMC IOA for ACF2 Security Technical Implementation Guide
72025-02-241 of 7 findings match
M1
z/OS BMC IOA for ACF2 Security Technical Implementation Guide
V7R22025-09-271 of 7 findings match
M1
z/OS BMC IOA for RACF Security Technical Implementation Guide
72025-02-241 of 8 findings match
M1
z/OS BMC IOA for RACF Security Technical Implementation Guide
V7R22025-09-271 of 8 findings match
M1
z/OS BMC IOA for TSS Security Technical Implementation Guide
V7R22025-09-281 of 9 findings match
M1
z/OS CA 1 Tape Management for ACF2 Security Technical Implementation Guide
72024-12-161 of 9 findings match
M1
z/OS CA 1 Tape Management for ACF2 Security Technical Implementation Guide
V7R22025-09-271 of 9 findings match
M1
z/OS CA 1 Tape Management for RACF Security Technical Implementation Guide
72024-12-161 of 11 findings match
M1
z/OS CA 1 Tape Management for RACF Security Technical Implementation Guide
V7R22025-09-271 of 11 findings match
M1
z/OS CA 1 Tape Management for TSS Security Technical Implementation Guide
V7R22025-09-281 of 11 findings match
M1
z/OS Front End Processor for ACF2 Security Technical Implementation Guide
72024-12-161 of 5 findings match
M1
z/OS Front End Processor for ACF2 Security Technical Implementation Guide
V7R22025-09-271 of 5 findings match
M1
z/OS Front End Processor for RACF Security Technical Implementation Guide
72024-12-161 of 5 findings match
M1
z/OS Front End Processor for RACF Security Technical Implementation Guide
V7R22025-09-271 of 5 findings match
M1
zOS BMC CONTROL-M for TSS Security Technical Implementation Guide
V7R22025-09-281 of 10 findings match
M1
zOS Front End Processor for TSS Security Technical Implementation Guide
V7R22025-09-281 of 5 findings match
M1
Network Device
4 STIGs
Network Device
4 STIGsApplication Layer Gateway Security Requirements Guide
22024-12-041 of 155 findings match
M1
Application Layer Gateway Security Requirements Guide
V2R32025-09-151 of 160 findings match
M1
IBM DataPower Network Device Management Security Technical Implementation Guide
V1R22017-10-051 of 64 findings match
M1
Riverbed NetIM OS Security Technical Implementation Guide
V1R12025-10-021 of 154 findings match
M1
Virtualization / Container
3 STIGs
Virtualization / Container
3 STIGsVirtual Machine Manager Security Requirements Guide
22024-12-061 of 193 findings match
M1
Virtual Machine Manager Security Requirements Guide
V2R32025-09-101 of 198 findings match
M1
VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 Security Technical Implementation Guide
V2R12024-07-111 of 106 findings match
M1
Uncategorized
22 STIGs
Uncategorized
22 STIGsAmazon Linux 2023 Security Technical Implementation Guide
V1R42026-05-223 of 187 findings match
M3
Oracle Linux 9 Security Technical Implementation Guide
V1R62026-05-143 of 448 findings match
M3
Red Hat Enterprise Linux 9 Security Technical Implementation Guide
V2R92026-05-203 of 445 findings match
M3
Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide
V1R12026-04-013 of 391 findings match
M3
Oracle Linux 8 Security Technical Implementation Guide
V2R92026-05-142 of 376 findings match
M2
Red Hat Enterprise Linux 10 Security Technical Implementation Guide
V1R22026-05-142 of 434 findings match
M2
Red Hat Enterprise Linux 8 Security Technical Implementation Guide
V2R82026-05-202 of 369 findings match
M2
SUSE Linux Enterprise Server 15 Security Technical Implementation Guide
V2R82026-05-152 of 218 findings match
M2
Show 14 more STIGs in this category →Hide additional STIGs
Application Layer Gateway Security Requirements Guide
V2R42026-05-231 of 160 findings match
M1
Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide
V2R92026-05-141 of 188 findings match
M1
Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide
V1R72026-05-221 of 438 findings match
M1
IBM z/OS ACF2 Security Technical Implementation Guide
V9R92026-06-151 of 226 findings match
M1
IBM z/OS RACF Security Technical Implementation Guide
V9R92026-06-031 of 223 findings match
M1
IBM z/OS TSS Security Technical Implementation Guide
V9R92026-06-151 of 231 findings match
M1
Mainframe Product Security Requirements Guide
V3R52026-05-231 of 194 findings match
M1
Microsoft Windows Server 2022 Security Technical Implementation Guide
V2R92026-05-191 of 279 findings match
M1
Microsoft Windows Server 2025 Security Technical Implementation Guide
V1R22026-05-281 of 292 findings match
M1
Solaris 11 SPARC Security Technical Implementation Guide
V3R62026-05-131 of 215 findings match
M1
Solaris 11 X86 Security Technical Implementation Guide
V3R62026-05-131 of 214 findings match
M1
Tri-Lab Operating System Stack (TOSS) 4 Security Technical Implementation Guide
V2R62026-05-131 of 225 findings match
M1
Virtual Machine Manager Security Requirements Guide
V2R42026-06-291 of 198 findings match
M1
VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 Security Technical Implementation Guide
V2R22026-06-021 of 107 findings match
M1