CCI-001790

The organization develops a configuration management plan for the information system that establishes a process for identifying configuration items throughout the system development life cycle.

Implementation Guidance

The organization being inspected/assessed will develop and document a configuration management plan for the information system that establishes a process for identifying configuration items throughout the system development life cycle.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the configuration management plan to verify it establishes and documents a process for identifying configuration items throughout the system development life cycle.

Compelling Evidence

1.) Signed and dated configuration management plan

The controls below (if any) were marked by NIST as being related to CCI-001790.