CM-06(01) Automated Management, Application, and Verification
NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
All changes in this version
Title
Automated Management, Application, and Verification
Control
Manage, apply, and verify configuration settings for [Assignment: system components] using [Assignment: organization-defined automated mechanisms].
Discussion
Automated tools (e.g., hardening tools, baseline configuration tools) can improve the accuracy, consistency, and availability of configuration settings information. Automation can also provide data aggregation and data correlation capabilities, alerting mechanisms, and dashboards to support risk-based decision-making within the organization.
Parameters
cm-6.1_prm_2: organization-defined automated mechanisms
cm-06.01_odp.01: system components
cm-06.01_odp.02: automated mechanisms
cm-06.01_odp.03: automated mechanisms
cm-06.01_odp.04: automated mechanisms
Related controls
ca-7
STIG rules that implement this control 9
Apple iOS/iPadOS 26 V1R3
- AIOS-26-001000 CAT III Apple iOS/iPadOS 26 must allow the administrator (MDM) to perform the following management function: enable/disable VPN protection across the device and [selection: on a per-app basis, on a per-group of applications processes basis].
- AIOS-26-014700 CAT II Apple iOS/iPadOS 26 must have DOD root and intermediate PKI certificates installed.
Apple iOS/iPadOS 27 V1R1
- AIOS-27-013300 CAT II Apple iOS/iPadOS 27 must have DoW root and intermediate PKI certificates installed.
Cisco IOS XE Router NDM Y26M04
- CISC-ND-001370 CAT I The Cisco router must be configured to use at least two authentication servers for the purpose of authenticating users prior to granting administrative access.
Google Android 16 COBO Y26M10
- GOOG-16-012300 CAT II Google Android 16 must allow only the administrator (EMM) to install/remove DoW root and intermediate PKI certificates.
- GOOG-16-012500 CAT I Google Android 16 must be configured to disable "Private Space" use.
Google Android 17 COBO Y26M06
- GOOG-17-009800 CAT II Google Android 17 must allow only the administrator (EMM) to install/remove DoW root and intermediate PKI certificates.
- GOOG-17-010000 CAT I Google Android 17 must be configured to disable Private Space use.
Samsung Android 16 COBO Y26M10
- KNOX-16-008600 CAT II Samsung Android's Work profile must allow only the Administrator (management tool) to perform the following management function: Install/remove DoW root and intermediate PKI certificates.