CM-2 (1)
CM-2 (1): Reviews And Updates
The organization reviews and updates the baseline configuration of the information system:
- CM-2 (1)(a): [Assignment: organization-defined frequency];
- CM-2 (1)(b): When required due to [Assignment organization-defined circumstances]; and
- CM-2 (1)(c): As an integral part of information system component installations and upgrades.
Supplemental
None
| CIA Levels | |
|---|---|
| Confidentiality | unknown |
| Integrity | low |
| Availability | unknown |
| Overlays |
|---|
| None |