CCI-000630

The organization requires in acquisition documents, that information system components are delivered in a secure, documented configuration, and that the secure configuration is the default configuration for any software reinstalls or upgrades.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-000630.