5.7.1—Access Restrictions for Changes
>Control Description
Planned or unplanned changes to the hardware, software, and/or firmware components of the information system can have significant effects on the overall security of the system. The goal is to allow only qualified and authorized individuals access to information system components for purposes of initiating changes, including upgrades, and modifications. Section 5.5, Access Control, describes agency requirements for control of privileges and restrictions.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.