NIST SP 800-53 Rev. 5
CM-3(1)
Configuration Management
enhancement

Automated Documentation, Notification, and Prohibition of Changes

Parent: CM-3

Description

Use [organization-defined parameter] to: a. Document proposed changes to the system; b. Notify [organization-defined parameter] of proposed changes to the system and request change approval; c. Highlight proposed changes to the system that have not been approved or disapproved within [organization-defined parameter]; d. Prohibit changes to the system until designated approvals are received; e. Document all changes to the system; and f. Notify [organization-defined parameter] when approved changes to the system are completed.

Mapped SPARTA techniques

67 techniques

Cite as SafeMode Space, nist-80053-rev5 CM-3(1).

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.