💼 CM-9 CONFIGURATION MANAGEMENT PLAN

• ID: /frameworks/nist-sp-800-53-r4/cm/09

Description

The organization develops, documents, and implements a configuration management plan for the information system that: CM-9a. Addresses roles, responsibilities, and configuration management processes and procedures; CM-9b. Establishes a process for identifying configuration items throughout the system development life cycle and for managing the configuration of the configuration items; CM-9c. Defines the configuration items for the information system and places the configuration items under configuration management; and CM-9d. Protects the configuration management plan from unauthorized disclosure and modification.

Similar

• Internal
  • ID: dec-c-b3ab9b0c

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 NIST CSF v1.1 → 💼 PR.IP-1: A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles (e.g. concept of least functionality)		4	26		no data

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 CM-9 (1) ASSIGNMENT OF RESPONSIBILITY					no data