Skip to main content

💼 CM-3 (1) AUTOMATED DOCUMENT | NOTIFICATION | PROHIBITION OF CHANGES

  • Contextual name: 💼 CM-3 (1) AUTOMATED DOCUMENT | NOTIFICATION | PROHIBITION OF CHANGES
  • ID: /frameworks/nist-sp-800-53-r4/cm/03/01
  • Located in: 💼 CM-3 CONFIGURATION CHANGE CONTROL

Description​

The organization employs automated mechanisms to: CM-3 (1)(a) Document proposed changes to the information system; CM-3 (1)(b) Notify [Assignment: organized-defined approval authorities] of proposed changes to the information system and request change approval; CM-3 (1)(c) Highlight proposed changes to the information system that have not been approved or disapproved by [Assignment: organization-defined time period]; CM-3 (1)(d) Prohibit changes to the information system until designated approvals are received; CM-3 (1)(e) Document all changes to the information system; and CM-3 (1)(f) Notify [Assignment: organization-defined personnel] when approved changes to the information system are completed.

Similar​

  • Internal
    • ID: dec-c-a7d50b50

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags