800-53|CM-3(3)

Title

AUTOMATED CHANGE IMPLEMENTATION

Description

The organization employs automated mechanisms to implement changes to the current information system baseline and deploys the updated baseline across the installed base.

Reference Item Details

Category: CONFIGURATION MANAGEMENT

Parent Title: CONFIGURATION CHANGE CONTROL

Family: CONFIGURATION MANAGEMENT

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.2.2.3.1 Configure 'Registry policy processing' - NoBackgroundPolicyWindowsCIS Windows 2003 MS v3.1.0
1.2.2.3.1 Configure 'Registry policy processing' - NoBackgroundPolicyWindowsCIS Windows 2003 DC v3.1.0
1.2.2.3.1 Configure 'Registry policy processing' - NoGPOListChangesWindowsCIS Windows 2003 MS v3.1.0
1.2.2.3.1 Configure 'Registry policy processing' - NoGPOListChangesWindowsCIS Windows 2003 DC v3.1.0
1.2.2.3.2 Configure 'Do not apply during periodic background processing'WindowsCIS Windows 2003 DC v3.1.0
1.2.2.3.2 Configure 'Do not apply during periodic background processing'WindowsCIS Windows 2003 MS v3.1.0
1.2.2.3.3 Configure 'Process even if the Group Policy objects have not changed'WindowsCIS Windows 2003 MS v3.1.0
1.2.2.3.3 Configure 'Process even if the Group Policy objects have not changed'WindowsCIS Windows 2003 DC v3.1.0
1.2.3.7 Set 'Do not apply during periodic background processing' to 'Enabled:FALSE'WindowsCIS Windows 8 L1 v1.0.0
1.2.3.8 Set 'Process even if the Group Policy objects have not changed' to 'Enabled:TRUE'WindowsCIS Windows 8 L1 v1.0.0
1.12.3 Registry policy processing (NoBackgroundPolicy) - Domain ControllerWindowsCIS Windows 2008 SSLF v1.2.0
1.12.3 Registry policy processing (NoBackgroundPolicy) - Domain ControllerWindowsCIS Windows 2008 Enterprise v1.2.0
1.12.3 Registry policy processing (NoBackgroundPolicy) - Member ServerWindowsCIS Windows 2008 Enterprise v1.2.0
1.12.3 Registry policy processing (NoBackgroundPolicy) - Member ServerWindowsCIS Windows 2008 SSLF v1.2.0
1.12.3 Registry policy processing (NoGPOListChanges) - Domain ControllerWindowsCIS Windows 2008 Enterprise v1.2.0
1.12.3 Registry policy processing (NoGPOListChanges) - Domain ControllerWindowsCIS Windows 2008 SSLF v1.2.0
1.12.3 Registry policy processing (NoGPOListChanges) - Member ServerWindowsCIS Windows 2008 Enterprise v1.2.0
1.12.3 Registry policy processing (NoGPOListChanges) - Member ServerWindowsCIS Windows 2008 SSLF v1.2.0
18.8.21.1 Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'WindowsCIS Windows Server 2012 R2 DC L1 v2.4.0
18.8.21.1 Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'WindowsCIS Windows Server 2012 R2 MS L1 v2.4.0
18.8.21.2 Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'WindowsCIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.1.0
18.8.21.2 Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'WindowsCIS Windows Server 2012 DC L1 v2.1.0
18.8.21.2 Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'WindowsCIS Windows Server 2012 R2 DC L1 v2.5.0
18.8.21.2 Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'WindowsCIS Microsoft Windows Server 2008 Member Server Level 1 v3.1.0
18.8.21.2 Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'WindowsCIS Windows 7 Workstation Level 1 v3.2.0
18.8.21.2 Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'WindowsCIS Windows Server 2012 MS L1 v2.1.0
18.8.21.2 Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'WindowsCIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.1.0
18.8.21.2 Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'WindowsCIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.1.0
18.8.21.2 Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'WindowsCIS Windows 7 Workstation Level 1 v3.1.0
18.8.21.2 Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0
18.8.21.2 Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'WindowsCIS Microsoft Windows Server 2016 DC L1 v1.2.0
18.8.21.2 Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.1.0
18.8.21.2 Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'WindowsCIS Microsoft Windows Server 2016 MS L1 v1.2.0
18.8.21.2 Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'WindowsCIS Windows Server 2012 R2 DC L1 v2.4.0
18.8.21.2 Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'WindowsCIS Windows Server 2012 R2 MS L1 v2.4.0
18.8.21.3 Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'WindowsCIS Windows 7 Workstation Level 1 v3.2.0
18.8.21.3 Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0
18.8.21.3 Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'WindowsCIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.1.0
18.8.21.3 Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'WindowsCIS Windows Server 2012 R2 MS L1 v2.5.0
18.8.21.3 Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'WindowsCIS Windows 7 Workstation Level 1 v3.1.0
18.8.21.3 Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'WindowsCIS Microsoft Windows Server 2016 DC L1 v1.2.0
18.8.21.3 Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'WindowsCIS Microsoft Windows Server 2016 MS L1 v1.2.0
18.8.21.3 Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'WindowsCIS Windows Server 2012 MS L1 v2.1.0
18.8.21.3 Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'WindowsCIS Microsoft Windows Server 2008 Member Server Level 1 v3.1.0
18.8.21.3 Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'WindowsCIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.1.0
18.8.21.3 Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'WindowsCIS Windows Server 2012 DC L1 v2.1.0
18.8.21.3 Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'WindowsCIS Windows Server 2012 R2 DC L1 v2.5.0
18.8.21.3 Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'WindowsCIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.1.0
18.8.21.3 Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.1.0
18.8.21.3 Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'WindowsCIS Windows Server 2012 R2 MS L1 v2.4.0