CM-6(2)

Requirement

Take the following actions in response to unauthorized changes to [Assignment: organization-defined configuration settings]: [Assignment: organization-defined actions].

Discussion

Responses to unauthorized changes to configuration settings include alerting designated organizational personnel, restoring established configuration settings, or in extreme cases halting affected system processing.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System security plan; privacy plan; configuration management policy; procedures addressing configuration settings for the system; configuration management plan; system design documentation; system configuration settings and associated documentation; alerts/notifications of unauthorized changes to system configuration settings; system component inventory; documented responses to unauthorized changes to system configuration settings; change control records; system audit records; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with security configuration management responsibilities; organizational personnel with security and privacy responsibilities; system/network administrators].

Test

[SELECT FROM: Organizational process for responding to unauthorized changes to system configuration settings; mechanisms supporting and/or implementing actions in response to unauthorized changes].

ID	Assessment Objectives
CM-06(02)	<CM-06(02)_ODP[01] actions> are taken in response to unauthorized changes to <CM-06(02)_ODP[02] configuration settings>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!