CCI-001230
CCI-001230 Definition
Incorporate flaw remediation into the organizational configuration management process.
| Status | |
| Type | CheckType.policy |
Master Assessment Datasheet
Implementation Guidance
The organization being inspected/assessed documents within their configuration management plan, flaw remediation processes.
Validation Procedures
The organization conducting the inspection/assessment obtains and examines the configuration management plan to ensure that it incorporates flaw remediation.
Compelling Evidence
1.) Signed and dated continuous monitoring plan. 2.) Reference to continuous monitoring plan section that refers to the flaw remediation process (identification, reporting, fixing)