An error occurred:

© 2025 Xylok, LLC

Version: features-advanced-collector-898c2c - rmfrev4

Navigate

CCI-003164

CCI-003164 Definition

Defines the personnel to whom security flaw findings and flaw resolution within the system, component, or service are reported.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-003164.

Control

Description

The organization requires the developer of the information system, system component, or information system service to:

a: Perform configuration management during system, component, or service [one or more of "design"/"development"/"implementation"/"operation"];

b: Document, manage, and control the integrity of changes to [one of ];

c: Implement only organization-approved changes to the system, component, or service;

d: Document approved changes to the system, component, or service and the potential security impacts of such changes; and

e: Track security flaws and flaw resolution within the system, component, or service and report findings to [one of ].