|
control enhancementCM-3(7)
Review System Changes (CM-3(7))
Review changes to the system [organization-defined] or when [organization-defined] to determine whether unauthorized changes have occurred.
configurationbaselineschange-controlenhancement
Why These Connect
Maps To1
These are equivalent or closely aligned requirements in other frameworks.
Enhances1
These enhancements add specific capabilities or refinements to the base control.
Cross-Framework Mappings(1)
ISO 27001ISO/IEC 27001:20221 mappingFinal
NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022
Organization-Defined Parameters(2)
Assignmentorganization-defined frequency
Assignmentorganization-defined circumstances