Glossary: Security Controls and Change Management

NIST SP 800-53

Also written: Special Publication 800-53, CM-3, CM-4

NIST's main catalog of security controls. Its control CM-3 covers approving, testing and recording changes, and CM-4 requires analyzing a change's security impact before it is made.