Navigate

CCI-000287

CCI-000287 Definition

Develop and document an organization-level; mission/business process-level; and/or system-level configuration management policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000287.

Control	Description
CM-1	The organization: a: Develops, documents, and disseminates to [one of ]: 1: A configuration management policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and 2: Procedures to facilitate the implementation of the configuration management policy and associated configuration management controls; and b: Reviews and updates the current: 1: Configuration management policy [one of ]; and 2: Configuration management procedures [one of ].

Control

Description

CM-1

The organization:

a: Develops, documents, and disseminates to [one of ]:
- 1: A configuration management policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
- 2: Procedures to facilitate the implementation of the configuration management policy and associated configuration management controls; and

b: Reviews and updates the current:
- 1: Configuration management policy [one of ]; and
- 2: Configuration management procedures [one of ].