CM-6 - Configuration Settings

CM-6 mandates that organizations establish, document, and maintain baseline configuration settings for information system components, and enforce those settings using automated mechanisms. It also requires periodic review and updating of the baselines to reflect changes in technology, threats, and organizational requirements.