CCI-000372

The organization employs automated mechanisms to centrally verify configuration settings for organization-defined information system components.

Implementation Guidance

The organization being inspected/assessed identifies, documents in the configuration management policy, and implements automated mechanisms to centrally verify configuration settings.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the configuration management policy to ensure the organization being inspected/assessed identifies automated mechanisms to centrally verify configuration settings. The organization being inspected/assessed may be required to demonstrate use of their identified automated mechanisms.

Compelling Evidence

1.) Signed and dated configuration management policy, which documents and identifies automated mechanisms to centrally verify configuration settings

The controls below (if any) were marked by NIST as being related to CCI-000372.