+CM-03(08) Prevent or Restrict Configuration Changes

CM-03(08) Prevent or Restrict Configuration Changes

Control

Prevent or restrict changes to the configuration of the system under the following circumstances: [Assignement: circumstances].

Discussion

System configuration changes can adversely affect critical system security and privacy functionality. Change restrictions can be enforced through automated mechanisms.

Assessment Objective

changes to the configuration of the system are prevented or restricted under [Assignement: circumstances].

Assessment Method

Examine

Configuration management policy procedures addressing system configuration change control configuration management plan change control records system architecture and configuration documentation system configuration settings and associated documentation system component inventory system audit records system security plan other relevant documents or records

Interview

1. Übersicht

Bezeichnung	Standard

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen
Quelle	Anforderung

3. Zugehörige Regulierungen

Regulierungen
Quelle	Regulierung

Verknüpfte Vorgänge

Verknüpfungen
Verknüpfungstyp	Vorgang
is blocked by	CM-03(08) Prevent or Restrict Configuration Changes – Assessment Procedure
is blocked by	Integrity Assurance & Enforcement (IAE)

NIST -
https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final