An error occurred:

© 2025 Xylok, LLC

Version: features-advanced-collector-898c2c - rmfrev4

Navigate

CCI-003159

CCI-003159 Definition

Defines the configuration items under configuration management that require the integrity of changes to be documented, managed and controlled.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-003159.

Control

Description

The organization requires the developer of the information system, system component, or information system service to:

a: Perform configuration management during system, component, or service [one or more of "design"/"development"/"implementation"/"operation"];

b: Document, manage, and control the integrity of changes to [one of ];

c: Implement only organization-approved changes to the system, component, or service;

d: Document approved changes to the system, component, or service and the potential security impacts of such changes; and

e: Track security flaws and flaw resolution within the system, component, or service and report findings to [one of ].