CCI-000436

The organization assigns responsibility for developing the configuration management process to organizational personnel that are not directly involved in information system development.

Implementation Guidance

The organization being inspected/assessed will assign responsibility for developing the configuration management process to organizational personnel that are not directly involved in information system development.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documentation of stakeholder role assignments to verify that the personnel assigned CM roles are not assigned roles for information system development.

Compelling Evidence

1.) Documentation that assigns responsibility for developing the configuration management process to organizational personnel that are not directly involved in information system development

The controls below (if any) were marked by NIST as being related to CCI-000436.