CCI-002056

The organization defines the time period the records of configuration-controlled changes are to be retained.

Implementation Guidance

DoD has defined the time period as a time period defined by the organization's CCB.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the time period as a time period defined by the organization's CCB.

Compelling Evidence

Automatically Compliant

The controls below (if any) were marked by NIST as being related to CCI-002056.