CM — Configuration Management
21 controls in the Configuration Management family
CM-1Policy and Procedures
CM-2Baseline Configuration
CM-2(3)Baseline Configuration | Retention of Previous Configurations
CM-3Configuration Change Control
CM-3(2)Configuration Change Control | Testing, Validation, and Documentation of Changes
CM-3(4)Configuration Change Control | Security and Privacy Representatives
CM-4Impact Analyses
CM-4(2)Impact Analyses | Verification of Controls
CM-5Access Restrictions for Change
CM-5(5)Access Restrictions for Change | Privilege Limitation for Production and Operation
CM-6Configuration Settings
CM-7Least Functionality
CM-7(1)Least Functionality | Periodic Review
CM-7(2)Least Functionality | Prevent Program Execution
CM-7(5)Least Functionality | Authorized Software
CM-8System Component Inventory
CM-8(1)System Component Inventory | Updates During Installation and Removal
CM-9Configuration Management Plan
CM-10Software Usage Restrictions
CM-11User-installed Software
CM-12Information Location