Back to catalog
CFG-01CFGConfiguration Management
Configuration Management Program
Description
Mechanisms exist to facilitate the implementation of configuration management controls.
Cross-Mappings
826 paths across 3 frameworks
Cross-Mappings
NIST 800-532 mappings
CCI433 mappings
CCI-000286
1.00
- Secure Controls Framework · 2026.2 · scf_strm · superset
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000287
1.00
- Secure Controls Framework · 2026.2 · scf_strm · superset
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000289
1.00
- Secure Controls Framework · 2026.2 · scf_strm · superset
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000290
1.00
- Secure Controls Framework · 2026.2 · scf_strm · superset
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000292
1.00
- Secure Controls Framework · 2026.2 · scf_strm · superset
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000421
1.00
- Secure Controls Framework · 2026.2 · scf_strm · superset
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000422
1.00
- Secure Controls Framework · 2026.2 · scf_strm · superset
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000423
1.00
- Secure Controls Framework · 2026.2 · scf_strm · superset
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000424
1.00
- Secure Controls Framework · 2026.2 · scf_strm · superset
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000425
1.00
- Secure Controls Framework · 2026.2 · scf_strm · superset
- DISA · 2025-01-23 · disa_cci_list · equivalent
+423 more (top 10 by confidence shown)
STIG5 mappings
SV-222630r961863_ruleThe Configuration Management (CM) repository must be properly patched and STIG compliant.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · superset
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 6 · disa_xccdf · related
SV-222631r961863_ruleAccess privileges to the Configuration Management (CM) repository must be reviewed every three months.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · superset
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 6 · disa_xccdf · related
SV-222632r961863_ruleA Software Configuration Management (SCM) plan describing the configuration control and change management process of application objects developed by the organization and the roles and responsibilities of the organization must be created and maintained.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · superset
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 6 · disa_xccdf · related
SV-222633r961863_ruleA Configuration Control Board (CCB) that meets at least every release cycle, for managing the Configuration Management (CM) process must be established.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · superset
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 6 · disa_xccdf · related
SV-239862r953982_ruleThe Cisco ASA must be configured to send log data of denied traffic to a central audit server for analysis.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · superset
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · V2R1 · disa_xccdf · related
Control mappings provided by the Secure Controls Framework (SCF).
SCF
Powered by the Secure Controls Framework
The control catalog, cross-mappings, and STRM relationship data shown here are provided by the Secure Controls Framework (SCF), 2026.2. Every mapping is credited to SCF as the methodology, with the SCF reference and version stored alongside it.
© SCF Council, LLC. Secure Controls Framework content is free and shown here with attribution. securecontrolsframework.com · About SCF on STIGViewer