BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

CM-03(07) Review System Changes

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged CM part of CM-3

Title

Review System Changes

Control

Review changes to the system [Assignment: frequency] or when [Assignment: circumstances] to determine whether unauthorized changes have occurred.

Discussion

Indications that warrant a review of changes to the system and the specific circumstances justifying such reviews may be obtained from activities carried out by organizations during the configuration change process or continuous monitoring process.

Parameters

cm-03.07_odp.01: frequency
cm-03.07_odp.02: circumstances

Related controls

au-6, au-7, cm-3

Assessment objective

CM-03(07) changes to the system are reviewed [Assignment: frequency] or when [Assignment: circumstances] to determine whether unauthorized changes have occurred.

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).