CM-2(1)
CM-2(1): Reviews and Updates
The organization reviews and updates the baseline configuration of the information system:
- (a): [organization-defined frequency];
- (b): When required due to [Assignment organization-defined circumstances]; and
- (c): As an integral part of information system component installations and upgrades.
Supplemental
| CIA Levels | |
|---|---|
| Confidentiality | unknown |
| Integrity | unknown |
| Availability | unknown |
| Overlays |
|---|
| None |
| CSF Categories |
|---|
| None |