💼 CM-1 Policy and Procedures (L)(M)(H)
- Contextual name: 💼 CM-1 Policy and Procedures (L)(M)(H)
- ID:
/frameworks/fedramp-low-security-controls/cm/01 - Located in: 💼 Configuration Management
Description
a. Develop, document, and disseminate to [Assignment: organization-defined personnel or roles]:
-
[Selection (one-or-more): organization-level; mission/business process-level; system-level] configuration management policy that:
(a) Addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
(b) Is consistent with applicable laws, executive orders, directives, regulations, policies, standards, and guidelines; and
-
Procedures to facilitate the implementation of the configuration management policy and the associated configuration management controls;
b. Designate an [Assignment: organization-defined official] to manage the development, documentation, and dissemination of the configuration management policy and procedures; and
c. Review and update the current configuration management:
-
Policy [FedRAMP Assignment: at least every three (3) years] and following [Assignment: organization-defined events]; and
-
Procedures [FedRAMP Assignment: at least annually] and following [FedRAMP Assignment: significant changes].
Similar
- Sections
/frameworks/nist-sp-800-53-r5/cm/01/frameworks/fedramp-high-security-controls/cm/01
- Internal
- ID:
dec-c-885ebc6c
- ID:
Similar Sections (Take Policies From)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 FedRAMP High Security Controls → 💼 CM-1 Policy and Procedures (L)(M)(H) | 3 | |||
| 💼 NIST SP 800-53 Revision 5 → 💼 CM-1 Policy and Procedures | 3 |
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|