💼 CM-3(1) Configuration Change Control | Automated Documentation, Notification, and Prohibition of Changes
- Contextual name: 💼 CM-3(1) Configuration Change Control | Automated Documentation, Notification, and Prohibition of Changes
- ID:
/frameworks/nist-sp-800-53-r5/cm/03/01
- Located in: 💼 CM-3 Configuration Change Control
Description
Use [Assignment: organization-defined automated mechanisms] to:
(a) Document proposed changes to the system;
(b) Notify [Assignment: organization-defined approval authorities] of proposed changes to the system and request change approval;
(c) Highlight proposed changes to the system that have not been approved or disapproved within [Assignment: organization-defined time period];
(d) Prohibit changes to the system until designated approvals are received;
(e) Document all changes to the system; and
(f) Notify [Assignment: organization-defined personnel] when approved changes to the system are completed.
Similar
Similar Sections (Give Policies To)
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|