Navigate

CM-2 (3)

CM-2 (3): Retention Of Previous Configurations

The organization retains [Assignment: organization-defined previous versions of baseline configurations of the information system] to support rollback.

Supplemental

Retaining previous versions of baseline configurations to support rollback may include, for example, hardware, software, firmware, configuration files, and configuration records.

CIA Levels
Confidentiality	unknown
Integrity	moderate
Availability	unknown

Overlays
None

Related Controls

The controls below (if any) were marked by NIST as being related to CM-2 (3).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of CM-2 (3).

Control	Description
No controls

Related CCIs

The CCIs below are tied to CM-2 (3).

CCI	Definition
CCI-000304	The organization retains organization-defined previous versions of baseline configurations of the information system to support rollback.
CCI-001736	The organization defines the previous versions of the baseline configuration of the information system required to support rollback.