+CM-03(03) Automated Change Implementation
|
CM-03(03) Automated Change Implementation
Control
Implement changes to the current system baseline and deploy the updated baseline across the installed base using [Assignement: automated mechanisms].
Discussion
Automated tools can improve the accuracy, consistency, and availability of configuration baseline information. Automation can also provide data aggregation and data correlation capabilities, alerting mechanisms, and dashboards to support risk-based decision-making within the organization.
Assessment Objective
- changes to the current system baseline are implemented using [Assignement: automated mechanisms];
- the updated baseline is deployed across the installed base using [Assignement: automated mechanisms].
Assessment Method
Examine
Configuration management policy
configuration management plan
procedures addressing system configuration change control
system design documentation
system architecture and configuration documentation
automated configuration control mechanisms
change control records
system component inventory
system audit records
system security plan
other relevant documents or records
Interview
Organizational personnel with configuration change control responsibilities
organizational personnel with information security responsibilities
system/network administrators
system developers
members of change control board or similar
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|