CCI-001230

The organization incorporates flaw remediation into the organizational configuration management process.

Implementation Guidance

The organization being inspected/assessed documents within their configuration management plan, flaw remediation processes.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the configuration management plan to ensure that it incorporates flaw remediation.

Compelling Evidence

1.) Signed and dated continuous monitoring plan. 2.) Reference to continuous monitoring plan section that refers to the flaw remediation process (identification, reporting, fixing)

The controls below (if any) were marked by NIST as being related to CCI-001230.