NIST 800-53 Rev 5

424 controls available

CM-6(1)high

Automated Management, Application, and Verification

Configuration Management

Control Statement

Manage, apply, and verify configuration settings for {{ insert: param, cm-06.01_odp.01 }} using {{ insert: param, cm-6.1_prm_2 }}.

Discussion

Automated tools (e.g., hardening tools, baseline configuration tools) can improve the accuracy, consistency, and availability of configuration settings information. Automation can also provide data aggregation and data correlation capabilities, alerting mechanisms, and dashboards to support risk-based decision-making within the organization.

Framework
NIST SP 800-53 Rev 5
Family
Configuration Management
Baselines
high

Related Frameworks

5 paths across 1 framework
CCI5 mappings
CCI-000370
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000371
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000372
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-002059
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-003947
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent

Related STIGs

374 STIGs reach this control through 26 CCIs. Expand a row to see the responsible NICE and O*NET roles.

Operating System — Desktop

10 STIGs
Show 2 more STIGs in this category →

Operating System — Server

47 STIGs
Oracle Linux 9 Security Technical Implementation Guide
12025-05-08148 of 456 findings match
Oracle Linux 9 Security Technical Implementation Guide
V1R52026-02-17145 of 448 findings match
Solaris 11 SPARC Security Technical Implementation Guide
V3R52026-02-19124 of 217 findings match
Show 39 more STIGs in this category →
Solaris 11 X86 Security Technical Implementation Guide
V3R52026-02-19123 of 216 findings match
Solaris 11 X86 Security Technical Implementation Guide
32025-05-05123 of 216 findings match
IBM AIX 7.x Security Technical Implementation Guide
V3R22026-02-06121 of 283 findings match
IBM AIX 7.x Security Technical Implementation Guide
32024-08-16121 of 283 findings match
Oracle Linux 8 Security Technical Implementation Guide
22025-05-13121 of 374 findings match
Oracle Linux 8 Security Technical Implementation Guide
V2R82026-02-13120 of 375 findings match
Anduril NixOS Security Technical Implementation Guide
V1R22025-08-198 of 103 findings match

Operating System — Mainframe

20 STIGs
IBM z/OS ACF2 Security Technical Implementation Guide
V9R82026-03-0936 of 225 findings match
IBM z/OS RACF Security Technical Implementation Guide
V9R82026-03-0928 of 222 findings match
IBM z/OS TSS Security Technical Implementation Guide
V9R82026-03-0928 of 230 findings match
IBM z/OS TSS Security Technical Implementation Guide
92025-06-2428 of 231 findings match
Show 12 more STIGs in this category →
Mainframe Product Security Requirements Guide
V3R42025-09-101 of 194 findings match
Mainframe Product Security Requirements Guide
32024-12-051 of 193 findings match

Operating System — Mobile

40 STIGs
Show 32 more STIGs in this category →

Network Device

130 STIGs
BIND 9.x Security Technical Implementation Guide
V3R22026-02-2542 of 73 findings match
BIND 9.x Security Technical Implementation Guide
22024-02-1537 of 70 findings match
Domain Name System (DNS) Security Requirements Guide
42024-07-0232 of 118 findings match
Show 122 more STIGs in this category →
Domain Name System (DNS) Security Requirements Guide
V4R22025-12-1916 of 119 findings match
Router Security Requirements Guide
V5R22025-09-1015 of 123 findings match
Router Security Requirements Guide
52024-05-2815 of 108 findings match
Riverbed NetIM OS Security Technical Implementation Guide
V1R12025-10-0214 of 154 findings match
Application Layer Gateway Security Requirements Guide
V2R32025-09-1513 of 160 findings match
Layer 2 Switch Security Requirements Guide
V3R42026-02-1213 of 36 findings match
Layer 2 Switch Security Requirements Guide
32025-03-0513 of 28 findings match
AAA Services Security Requirements Guide
V2R22024-12-048 of 77 findings match
Cisco ISE NDM Security Technical Implementation Guide
V2R32025-12-115 of 53 findings match
Network Device Management Security Requirements Guide
V5R32025-02-115 of 104 findings match
Network Device Management Security Requirements Guide
V5R42025-09-105 of 105 findings match
SDN Controller Security Requirements Guide
22024-05-285 of 34 findings match
Firewall Security Requirements Guide
V3R32025-09-224 of 35 findings match
Firewall Security Requirements Guide
32024-12-044 of 34 findings match
SEL-2740S L2S Security Technical Implementation Guide
V1R12019-05-064 of 13 findings match
SEL-2740S NDM Security Technical Implementation Guide
V1R12019-05-064 of 13 findings match
Cisco ISE NAC Security Technical Implementation Guide
V2R32025-12-103 of 30 findings match
RUCKUS ICX NDM Security Technical Implementation Guide
V1R12025-05-283 of 25 findings match
Cisco ACI NDM Security Technical Implementation Guide
V1R22025-12-112 of 26 findings match
Cisco ASA NDM Security Technical Implementation Guide
V2R42025-12-081 of 47 findings match
Cisco ASA VPN Security Technical Implementation Guide
V2R22024-08-221 of 41 findings match

Database

13 STIGs
Database Security Requirements Guide
V4R52026-02-261 of 142 findings match
Database Security Requirements Guide
42024-12-041 of 142 findings match
Show 5 more STIGs in this category →

Web / Application Server

25 STIGs
Show 17 more STIGs in this category →
Web Server Security Requirements Guide
V4R42025-09-102 of 126 findings match
Web Server Security Requirements Guide
42025-02-122 of 124 findings match
Application Server Security Requirements Guide
V4R42025-09-101 of 137 findings match
Application Server Security Requirements Guide
42025-02-111 of 128 findings match

Virtualization / Container

45 STIGs
Show 37 more STIGs in this category →
Kubernetes Security Technical Implementation Guide
V2R62026-02-1224 of 92 findings match
Kubernetes Security Technical Implementation Guide
22025-05-1624 of 94 findings match
Container Platform Security Requirements Guide
V2R42025-09-104 of 188 findings match
Container Platform Security Requirements Guide
22025-05-154 of 187 findings match
Virtual Machine Manager Security Requirements Guide
22024-12-062 of 193 findings match
Virtual Machine Manager Security Requirements Guide
V2R32025-09-102 of 198 findings match

Cloud / Identity Service

3 STIGs

Endpoint Security Management

29 STIGs
Central Log Server Security Requirements Guide
V3R42026-02-128 of 127 findings match
Central Log Server Security Requirements Guide
32024-12-048 of 125 findings match
Tanium 7.x Security Technical Implementation Guide
V2R32025-05-146 of 98 findings match
ISEC7 Sphere Security Technical Implementation Guide
V3R12024-08-204 of 34 findings match
Show 21 more STIGs in this category →
BlackBerry UEM Security Technical Implementation Guide
V2R12020-12-043 of 16 findings match
HYCU Protege Security Technical Implementation Guide
V1R22026-03-043 of 55 findings match

Productivity Application

6 STIGs

Uncategorized

6 STIGs