NIST 800-53 rev.5/Configuration Management/263 of 1011
CM-07 (09)Least Functionality | Prohibiting The Use of Unauthorized Hardware
Control family: Configuration Management
Control description
(a) Identify [Assignment: organization-defined hardware components authorized for system use];
(b) Prohibit the use or connection of unauthorized hardware components;
(c) Review and update the list of authorized hardware components [Assignment: organization-defined frequency].
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.