💼 CM-9 CONFIGURATION MANAGEMENT PLAN

• Contextual name: 💼 CM-9 CONFIGURATION MANAGEMENT PLAN
• ID: /frameworks/nist-sp-800-53-r4/cm/09
• Located in: 💼 CM CONFIGURATION MANAGEMENT

Description

The organization develops, documents, and implements a configuration management plan for the information system that: CM-9a. Addresses roles, responsibilities, and configuration management processes and procedures; CM-9b. Establishes a process for identifying configuration items throughout the system development life cycle and for managing the configuration of the configuration items; CM-9c. Defines the configuration items for the information system and places the configuration items under configuration management; and CM-9d. Protects the configuration management plan from unauthorized disclosure and modification.

Similar

• Internal
  • ID: dec-c-b3ab9b0c

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 NIST CSF v1.1 → 💼 PR.IP-1: A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles (e.g. concept of least functionality)		4	14

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags
💼 CM-9 (1) ASSIGNMENT OF RESPONSIBILITY