CCI-000331

Implementation Guidance

The organization being inspected/assessed documents and employs procedures for deploying the updated information system baseline across the installed base. The information system must maintain an audit trail of automated baseline deployments.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented deployment procedures and a sampling of the audit trail of automated baseline deployments to ensure the organization being inspected/assessed is deploying the updated information system baseline across the installed base.

Compelling Evidence

1.) Documentation of procedures for deploying the updated information system baseline across the installed base