Navigate

CCI-000324

CCI-000324 Definition

Use organization-defined automated mechanisms to highlight proposed changes to the system that have not been approved or disapproved by an organization-defined time period.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000324.

Control	Description
CM-3(1)	The organization employs automated mechanisms to: (a): Document proposed changes to the information system; (b): Notify [one of ] of proposed changes to the information system and request change approval; (c): Highlight proposed changes to the information system that have not been approved or disapproved by [one of ]; (d): Prohibit changes to the information system until designated approvals are received; (e): Document all changes to the information system; and (f): Notify [one of ] when approved changes to the information system are completed.

Control

Description

CM-3(1)

The organization employs automated mechanisms to:

(a): Document proposed changes to the information system;

(b): Notify [one of ] of proposed changes to the information system and request change approval;

(c): Highlight proposed changes to the information system that have not been approved or disapproved by [one of ];

(d): Prohibit changes to the information system until designated approvals are received;

(e): Document all changes to the information system; and

(f): Notify [one of ] when approved changes to the information system are completed.