CCI-003929

Defines the circumstances for preventing or restricting changes to the configuration of the system.

Implementation Guidance

Determine if changes to the configuration of the system are prevented or restricted under [CM-03(08)_ODP; the circumstances under which changes are to be prevented or restricted are defined].

Validation Procedures

Examine: [SELECT FROM: Configuration management policy; procedures addressing system configuration change control; configuration management plan; change control records; system architecture and configuration documentation; system configuration settings and associated documentation; system component inventory; system audit records; system security plan; other relevant documents or records].

The controls below (if any) were marked by NIST as being related to CCI-003929.