# NIST 800-53 Configuration Management (CM)

Browse NIST 800-53 Configuration Management (CM) controls — establish and maintain secure baseline configurations — with implementation guidance and cross-framework mappings.

* [CM-1: Policy and Procedures](/compliance/nist-sp-800-53/cm/cm-1)
* [CM-2: Baseline Configuration](/compliance/nist-sp-800-53/cm/cm-2)
* [CM-3: Configuration Change Control](/compliance/nist-sp-800-53/cm/cm-3)
* [CM-4: Impact Analyses](/compliance/nist-sp-800-53/cm/cm-4)
* [CM-5: Access Restrictions for Change](/compliance/nist-sp-800-53/cm/cm-5)
* [CM-6: Configuration Settings](/compliance/nist-sp-800-53/cm/cm-6)
* [CM-7: Least Functionality](/compliance/nist-sp-800-53/cm/cm-7)
* [CM-8: System Component Inventory](/compliance/nist-sp-800-53/cm/cm-8)
* [CM-9: Configuration Management Plan](/compliance/nist-sp-800-53/cm/cm-9)
* [CM-10: Software Usage Restrictions](/compliance/nist-sp-800-53/cm/cm-10)
* [CM-11: User-installed Software](/compliance/nist-sp-800-53/cm/cm-11)
* [CM-12: Information Location](/compliance/nist-sp-800-53/cm/cm-12)
* [CM-13: Data Action Mapping](/compliance/nist-sp-800-53/cm/cm-13)
* [CM-14: Signed Components](/compliance/nist-sp-800-53/cm/cm-14)

Experience superior visibility and a simpler approach to cyber risk management

[Get a demo](https://www.upguard.com/contact-sales)

[Free trial](https://www.upguard.com/demo)