CCI-000370
CCI-000370 Definition
Manage configuration settings for organization-defined system components using organization-defined automated mechanisms.
Status | |
Type | CheckType.policy |
Master Assessment Datasheet
Implementation Guidance
The organization being inspected/assessed identifies, documents in the configuration management policy, and implements automated mechanisms to centrally manage configuration settings.
Validation Procedures
The organization conducting the inspection/assessment obtains and examines the configuration management policy to ensure the organization being inspected/assessed identifies automated mechanisms to centrally manage configuration settings. The organization being inspected/assessed may be required to demonstrate use of their identified automated mechanisms.
Compelling Evidence
1.) Signed and dated configuration management policy, which documents automated mechanisms to centrally manage configuration settings