NIST 800-53 Rev. 5

CM-3(8): Configuration Change Control | Prevent or Restrict Configuration Changes

Control Text:

Prevent or restrict changes to the configuration of the system under the following circumstances: [Assignment: organization-defined circumstances].

System configuration changes can adversely affect critical system security and privacy functionality. Change restrictions can be enforced through automated mechanisms.

Related Controls

  • None