Compliancemanzill.com
NIST 800-53 rev.5

NIST 800-53 rev.5/Configuration Management/229 of 1011

CM-02Baseline Configuration

Control family: Configuration Management

Control description

a. Develop, document, and maintain under configuration control, a current baseline configuration of the system; and

b. Review and update the baseline configuration of the system:

1. [Assignment: organization-defined frequency];

2. When required due to [Assignment: organization-defined circumstances]; and

3. When system components are installed or upgraded.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.