CCI-000298

The organization reviews and updates the baseline configuration of the information system as an integral part of information system component installations.

Implementation Guidance

The organization being inspected/assessed reviews and updates the baseline configuration of the information system as an integral part of information system component installations. The organization must document each occurrence of the reviews and update actions as an audit trail.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documentation of organizational reviews and update actions for the baseline configuration of the information system as an integral part of information system component installations to ensure review and necessary updates are occurring.

Compelling Evidence

1.) Signed and dated configuration management policy referencing section with reviews and updates to baseline configuration

The controls below (if any) were marked by NIST as being related to CCI-000298.