An error occurred:

© 2024 Xylok, LLC

Version: v2024.12.1-0560-0560

Navigate

CCI-000425

CCI-000425 Definition

The organization documents a configuration management plan for the information system that defines the configuration items for the information system.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Compelling Evidence

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000425.

Control

Description

The organization develops, documents, and implements a configuration management plan for the information system that:

a: Addresses roles, responsibilities, and configuration management processes and procedures;

b: Establishes a process for identifying configuration items throughout the system development life cycle and for managing the configuration of the configuration items;

c: Defines the configuration items for the information system and places the configuration items under configuration management; and

d: Protects the configuration management plan from unauthorized disclosure and modification.