GRCA Planeth
You are not logged in
Log In
Start
Sources
›
CM-02 [H] Baseline Configuration
›
Standard - CM-02(03) [H] Retention of Previous Configurations
+CM-02(03) [H] Retention of Previous Configurations
CM-02(03) [H] Retention of Previous Configurations
Control
Retain [Assignement: number] of previous versions of baseline configurations of the system to support rollback.
Discussion
Retaining previous versions of baseline configurations to support rollback include hardware, software, firmware, configuration files, configuration records, and associated documentation.
Assessment Objective
[Assignement: number] of previous baseline configuration version(s) of the system is/are retained to support rollback.
Assessment Method
Examine
Configuration management policy procedures addressing the baseline configuration of the system configuration management plan system architecture and configuration documentation system configuration settings and associated documentation copies of previous baseline configuration versions system security plan other relevant documents or records
Interview
Organizational personnel with configuration management responsibilities organizational personnel with information security responsibilities system/network administrators
1. Overview
Summary
Standard
1.1 References
1.2 Identified Requirements
1.3 Related Regulations
2. Identified Requirements
Requirements
Source
Requirement
3. Related Regulations
Regulations
Source
Regulation
Linked Issues
Issuelinks
Linktype
Issue
is blocked by
CM-02(03) [H] Retention of Previous Configurations – Assessment Procedure
is blocked by
Retention Of Previous Configurations
NIST
-
https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final