CM-9—Configuration Management Plan
>Control Description
Develop, document, and implement a configuration management plan for the system that:
a. Addresses roles, responsibilities, and configuration management processes and procedures;
b. Establishes a process for identifying configuration items throughout the system development life cycle and for managing the configuration of the configuration items;
c. Defines the configuration items for the system and places the configuration items under configuration management;
d. Is reviewed and approved by ⚙organization-defined personnel or roles; and
e. Protects the configuration management plan from unauthorized disclosure and modification.
>Related Controls
Ask AI
Configure your API key to use AI features.