Compliancemanzill.com
NIST 800-53 rev.5

NIST 800-53 rev.5/Configuration Management/267 of 1011

CM-08 (03)System Component Inventory | Automated Unauthorized Component Detection

Control family: Configuration Management

Control description

(a) Detect the presence of unauthorized hardware, software, and firmware components within the system using [Assignment: organization-defined automated mechanisms] [Assignment: organization-defined frequency]; and

(b) Take the following actions when unauthorized components are detected: [Selection (one or more): disable network access by such components; isolate the components; notify [Assignment: organization-defined personnel or roles]].

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.