NIST 800-53 REV 5 • CONFIGURATION MANAGEMENT
CM-3(3) — Automated Change Implementation
Implement changes to the current system baseline and deploy the updated baseline across the installed base using {{ insert: param, cm-03.03_odp }}.
CMMC Practice Mapping
No direct CMMC mapping
NIST 800-171 Mapping
No direct NIST 800-171 mapping
Related Controls
No related controls listed
Supplemental Guidance
Automated tools can improve the accuracy, consistency, and availability of configuration baseline information. Automation can also provide data aggregation and data correlation capabilities, alerting mechanisms, and dashboards to support risk-based decision-making within the organization.
Practitioner Notes
This enhancement requires automated implementation of approved changes — reducing the risk of human error during deployment.
Example 1: Use Ansible playbooks or Terraform to automatically deploy approved configuration changes to servers, ensuring consistency and eliminating manual mistakes.
Example 2: Configure Intune to automatically push approved configuration profiles and security baselines to enrolled devices without requiring manual action by technicians.