💼 CM-9 CONFIGURATION MANAGEMENT PLAN
- ID:
/frameworks/nist-sp-800-53-r4/cm/09
Stats​
not available
Description​
The organization develops, documents, and implements a configuration management plan for the information system that: CM-9a. Addresses roles, responsibilities, and configuration management processes and procedures; CM-9b. Establishes a process for identifying configuration items throughout the system development life cycle and for managing the configuration of the configuration items; CM-9c. Defines the configuration items for the information system and places the configuration items under configuration management; and CM-9d. Protects the configuration management plan from unauthorized disclosure and modification.
Similar​
- Internal
- ID:
dec-c-b3ab9b0c
- ID:
Similar Sections (Give Policies To)​
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|---|---|---|---|---|
| 💼 NIST CSF v1.1 → 💼 PR.IP-1: A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles (e.g. concept of least functionality) | 4 | 26 | no data |
Sub Sections​
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|---|---|---|---|---|
| 💼 CM-9 (1) ASSIGNMENT OF RESPONSIBILITY | no data |