03.04 — Configuration Management
36 requirements in the Configuration Management family
03.04.01Baseline Configuration
03.04.01.aBaseline Configuration a
03.04.01.bBaseline Configuration b
03.04.02Configuration Settings
03.04.02.aConfiguration Settings a
03.04.02.bConfiguration Settings b
03.04.03Configuration Change Control
03.04.03.aConfiguration Change Control a
03.04.03.bConfiguration Change Control b
03.04.03.cConfiguration Change Control c
03.04.03.dConfiguration Change Control d
03.04.04Impact Analyses
03.04.04.aImpact Analyses a
03.04.04.bImpact Analyses b
03.04.05Access Restrictions for Change
03.04.06Least Functionality
03.04.06.aLeast Functionality a
03.04.06.bLeast Functionality b
03.04.06.cLeast Functionality c
03.04.06.dLeast Functionality d
03.04.07Nonessential Functionality
03.04.08Application Execution Policy
03.04.08.aApplication Execution Policy a
03.04.08.bApplication Execution Policy b
03.04.08.cApplication Execution Policy c
03.04.09User-Installed Software
03.04.10System Component Inventory
03.04.10.aSystem Component Inventory a
03.04.10.bSystem Component Inventory b
03.04.10.cSystem Component Inventory c
03.04.11Information Location
03.04.11.aInformation Location a
03.04.11.bInformation Location b
03.04.12System and Component Configuration for High-Risk Areas
03.04.12.aSystem and Component Configuration for High-Risk Areas a
03.04.12.bSystem and Component Configuration for High-Risk Areas b