CCI-001503

The organization controls changes to the configuration settings in accordance with organizational policies and procedures.

Implementation Guidance

The organization being inspected/assessed develops and documents a process for controlling changes to the configuration settings in accordance with organizational policies and procedures.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed controls changes to the configuration settings in accordance with organizational policies and procedures.

Compelling Evidence

1.) Change control board charter

The controls below (if any) were marked by NIST as being related to CCI-001503.