CCI-001795

The organization implements a configuration management plan for the information system that establishes a process for managing the configuration of the configuration items.

Implementation Guidance

The organization being inspected/assessed will implement a configuration management plan that has a process for controlling changes to configuration items.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the configuration management plan as well as evidence of implementation (e.g., completed change requests, meeting minutes, and other relevant documents) to ensure the organization being inspected/assessed implements a configuration management plan for the information system that establishes a process for managing the configuration of the configuration items.

Compelling Evidence

1.) Signed and dated configuration management plan

The controls below (if any) were marked by NIST as being related to CCI-001795.