Navigate

CM-2(3)

CM-2(3): Retention of Previous Configurations

The organization retains [organization-defined previous versions of baseline configurations of the information system] to support rollback.

Supplemental

Retaining previous versions of baseline configurations to support rollback may include, for example, hardware, software, firmware, configuration files, and configuration records.

CIA Levels
Confidentiality	unknown
Integrity	high
Availability	unknown

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to CM-2(3).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of CM-2(3).

Control	Description
No controls

Related CCIs

The CCIs below are tied to CM-2(3).

CCI	Definition
CCI-000304	Retain organization-defined number of previous versions of baseline configurations of the system to support rollback.
CCI-001736	Defines the number of previous versions of the baseline configuration of the system required to support rollback.