CM — Configuration Management
9 practices in the Configuration Management domain
CM.L2-3.4.1System Baselining
CM.L2-3.4.2Security Configuration Enforcement
CM.L2-3.4.3System Change Management
CM.L2-3.4.4Security Impact Analysis
CM.L2-3.4.5Access Restrictions for Change
CM.L2-3.4.6Least Functionality
CM.L2-3.4.7Nonessential Functionality
CM.L2-3.4.8Application Execution Policy
CM.L2-3.4.9User-Installed Software