💼 CM-3(1) Automated Documentation, Notification, and Prohibition of Changes (H)

• Contextual name: 💼 CM-3(1) Automated Documentation, Notification, and Prohibition of Changes (H)
• ID: /frameworks/fedramp-high-security-controls/cm/03/01
• Located in: 💼 CM-3 Configuration Change Control (M)(H)

Description

Use [Assignment: organization-defined automated mechanisms] to:

(a) Document proposed changes to the system;

(b) Notify [Assignment: organization-defined approval authorities] of proposed changes to the system and request change approval;

(c) Highlight proposed changes to the system that have not been approved or disapproved within [FedRAMP Assignment: organization agreed upon time period];

(d) Prohibit changes to the system until designated approvals are received;

(e) Document all changes to the system; and

(f) Notify [FedRAMP Assignment: organization defined configuration management approval authorities] when approved changes to the system are completed.

Similar

• Sections
  • /frameworks/nist-sp-800-53-r5/cm/03/01
• Internal
  • ID: dec-c-0c811778

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 NIST SP 800-53 Revision 5 → 💼 CM-3(1) Configuration Change Control _ Automated Documentation, Notification, and Prohibition of Changes

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags