💼 CM-2 Baseline Configuration (L)(M)(H)
- ID:
/frameworks/fedramp-high-security-controls/cm/02
Description
a. Develop, document, and maintain under configuration control, a current baseline configuration of the system; and
b. Review and update the baseline configuration of the system:
-
[FedRAMP Assignment: at least annually and when a significant change occurs];
-
When required due to [FedRAMP Assignment: to include when directed by the JAB]; and
-
When system components are installed or upgraded.
CM-2 Additional FedRAMP Requirements and Guidance:
(b) (1) Guidance: Significant change is defined in NIST Special Publication 800-37 Revision 2, Appendix F.
Similar
- Sections
/frameworks/nist-sp-800-53-r5/cm/02
- Internal
- ID:
dec-c-aa2b018a
- ID:
Similar Sections (Take Policies From)
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|---|---|---|---|---|
| 💼 NIST SP 800-53 Revision 5 → 💼 CM-2 Baseline Configuration | 7 | 29 | no data |
Similar Sections (Give Policies To)
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|---|---|---|---|---|
| 💼 FedRAMP Low Security Controls → 💼 CM-2 Baseline Configuration (L)(M)(H) | 29 | no data | |||
| 💼 FedRAMP Moderate Security Controls → 💼 CM-2 Baseline Configuration (L)(M)(H) | 3 | 30 | no data |
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|---|---|---|---|---|
| 💼 CM-2(2) Automation Support for Accuracy and Currency (M)(H) | 16 | no data | |||
| 💼 CM-2(3) Retention of Previous Configurations (M)(H) | 1 | 1 | no data | ||
| 💼 CM-2(7) Configure Systems and Components for High-risk Areas (M)(H) | no data |