CCI-001502

The organization monitors changes to the configuration settings in accordance with organizational policies and procedures.

Implementation Guidance

The organization being inspected/assessed develops and documents a process for monitoring changes to the configuration settings in accordance with organizational policies and procedures.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed monitors changes to the configuration settings in accordance with organizational policies and procedures.

Compelling Evidence

1.) Documented process for monitoring changes to the configuration settings

The controls below (if any) were marked by NIST as being related to CCI-001502.