Navigate

CCI-000323

CCI-000323 Definition

Use organization-defined automated mechanisms to notify organization-defined approval authorities of proposed changes to the system and request change approval.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000323.

Control	Description
CM-3(1)	The organization employs automated mechanisms to: (a): Document proposed changes to the information system; (b): Notify [one of ] of proposed changes to the information system and request change approval; (c): Highlight proposed changes to the information system that have not been approved or disapproved by [one of ]; (d): Prohibit changes to the information system until designated approvals are received; (e): Document all changes to the information system; and (f): Notify [one of ] when approved changes to the information system are completed.

Control

Description

CM-3(1)

The organization employs automated mechanisms to:

(a): Document proposed changes to the information system;

(b): Notify [one of ] of proposed changes to the information system and request change approval;

(c): Highlight proposed changes to the information system that have not been approved or disapproved by [one of ];

(d): Prohibit changes to the information system until designated approvals are received;

(e): Document all changes to the information system; and

(f): Notify [one of ] when approved changes to the information system are completed.