CCI-000371

Apply configuration settings for organization-defined system components using organization-defined automated mechanisms.

Implementation Guidance

The organization being inspected/assessed identifies, documents in the configuration management policy, and implements automated mechanisms to centrally apply configuration settings.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the configuration management policy to ensure the organization being inspected/assessed identifies automated mechanisms to centrally apply configuration settings. The organization being inspected/assessed may be required to demonstrate use of their identified automated mechanisms.

Compelling Evidence

1.) Signed and dated configuration management policy, which documents and identifies automated mechanisms to centrally apply configuration settings

The controls below (if any) were marked by NIST as being related to CCI-000371.