Navigate

CM-2(3)

CM-2(3): Retention of Previous Configurations

Retain [the number of previous baseline configuration versions to be retained is defined;] of previous versions of baseline configurations of the system to support rollback.

Supplemental

Retaining previous versions of baseline configurations to support rollback include hardware, software, firmware, configuration files, configuration records, and associated documentation.

CIA Levels
Confidentiality	unknown
Integrity	moderate
Availability	unknown

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to CM-2(3).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of CM-2(3).

Control	Description
No controls

Related CCIs

The CCIs below are tied to CM-2(3).

CCI	Definition
CCI-000304	Retain organization-defined number of previous versions of baseline configurations of the system to support rollback.
CCI-001736	Defines the number of previous versions of the baseline configuration of the system required to support rollback.