CCI-000304

The organization retains organization-defined previous versions of baseline configurations of the information system to support rollback.

Implementation Guidance

The organization being inspected/assessed retains the previous approved baseline configuration of IS components for a minimum of 3 months and documents baseline configuration to support rollback. The goal is to verify that the IS can roll back components to previous versions. DoD has defined the previous versions as the previous approved baseline configuration of IS components for a minimum of 3 months.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documentation of the previous version of the baseline configuration to determine if all IS components necessary for rollback are retained. DoD has defined the previous versions as the previous approved baseline configuration of IS components for a minimum of 3 months.

Compelling Evidence

1.) Signed and dated previous versions of baseline configurations

The controls below (if any) were marked by NIST as being related to CCI-000304.