NIST 800-53 REV 5 • SYSTEM AND INFORMATION INTEGRITY
SI-6(2) — Automation Support for Distributed Testing
Implement automated mechanisms to support the management of distributed security and privacy function testing.
CMMC Practice Mapping
No direct CMMC mapping
NIST 800-171 Mapping
No direct NIST 800-171 mapping
Related Controls
Supplemental Guidance
The use of automated mechanisms to support the management of distributed function testing helps to ensure the integrity, timeliness, completeness, and efficacy of such testing.
Practitioner Notes
Use automation to support distributed security testing across your environment rather than relying on manual checks of each system.
Example 1: Use automated configuration scanning (like SCAP scanners or Azure Policy) to verify security settings across all systems simultaneously. The scan checks that every machine meets your security baseline and reports non-compliant systems.
Example 2: Deploy automated compliance checking through Microsoft Intune or SCCM compliance baselines. Devices are continuously evaluated against required configurations (BitLocker, firewall, AV status), and non-compliant devices are automatically flagged and optionally restricted.