| NIST SP 800-53:CONTROLS | STANDARD [PDF] |
| ID | Name | Priority | LOW | MOD | HIGH |
| CM-1 | CONFIGURATION MANAGEMENT POLICY AND PROCEDURES | P1 | CM-1 | CM-1 | CM-1 |
| CM-2 | BASELINE CONFIGURATION | P1 | CM-2 | CM-2 (1) (3) (4) | CM-2 (1) (2) (3) (5) (6) |
| CM-3 | CONFIGURATION CHANGE CONTROL | P1 | Not Selected | CM-3 (2) | CM-3 (1) (2) |
| CM-4 | SECURITY IMPACT ANALYSIS | P2 | CM-4 | CM-4 | CM-4 (1) |
| CM-5 | ACCESS RESTRICTIONS FOR CHANGE | P1 | Not Selected | CM-5 | CM-5 (1) (2) (3) |
| CM-6 | CONFIGURATION SETTINGS | P1 | CM-6 | CM-6 (3) | CM-6 (1) (2) (3) |
| CM-7 | LEAST FUNCTIONALITY | P1 | CM-7 | CM-7 (1) | CM-7 (1) (2) |
| CM-8 | INFORMATION SYSTEM COMPONENT INVENTORY | P1 | CM-8 | CM-8 (1) (5) | CM-8 (1) (2) (3) (4) (5) |
| CM-9 | CONFIGURATION MANAGEMENT PLAN | P1 | Not Selected | CM-9 | CM-9 |