CM-3(1)—Automated Documentation, Notification, And Prohibition Of Changes

Use [Assignment: organization-defined automated mechanisms] to: a. Document proposed changes to the system; b. Notify [Assignment: organization-defined approval authorities] of proposed changes to the system and request change approval; c. Highlight proposed changes to the system that have not been approved or disapproved within [Assignment: organization-defined time period]; d. Prohibit changes to the system until designated approvals are received; e. Document all changes to the system; and f. Notify [Assignment: organization-defined personnel] when approved changes to the system are completed.