+CM-03(05) Automated Security Response

CM-03(05) Automated Security Response

Control

Implement the following security responses automatically if baseline configurations are changed in an unauthorized manner: [Assignement: security responses].

Discussion

Automated security responses include halting selected system functions, halting system processing, and issuing alerts or notifications to organizational personnel when there is an unauthorized modification of a configuration item.

Assessment Objective

[Assignement: security responses] are automatically implemented if baseline configurations are changed in an unauthorized manner.

Assessment Method

Examine

System security plan configuration management policy procedures addressing system configuration change control configuration management plan system design documentation system architecture and configuration documentation system configuration settings and associated documentation alerts/notifications of unauthorized baseline configuration changes system audit records other relevant documents or records

Interview

Organizational personnel with configuration change control responsibilities organizational personnel with information security responsibilities system/network administrators system developers members of change control board or similar

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by CM-03(05) Automated Security Response – Assessment Procedure
is blocked by Automated Security Response
is blocked by Integrity Assurance & Enforcement (IAE)