CM-03(01) [H] Automated Documentation, Notification, and Prohibition of Changes

Control

1. Document proposed changes to the system;
2. Notify [Assignement: approval authorities] of proposed changes to the system and request change approval;
3. Highlight proposed changes to the system that have not been approved or disapproved within [Assignement: time period];
4. Prohibit changes to the system until designated approvals are received;
5. Document all changes to the system; and
6. Notify [Assignement: personnel] when approved changes to the system are completed.

Discussion

Assessment Objective

1. [Assignement: automated mechanisms] are used to document proposed changes to the system;
2. [Assignement: automated mechanisms] are used to notify [Assignement: approval authorities] of proposed changes to the system and request change approval;
3. [Assignement: automated mechanisms] are used to highlight proposed changes to the system that have not been approved or disapproved within [Assignement: time period];
4. [Assignement: automated mechanisms] are used to prohibit changes to the system until designated approvals are received;
5. [Assignement: automated mechanisms] are used to document all changes to the system;
6. [Assignement: automated mechanisms] are used to notify [Assignement: personnel] when approved changes to the system are completed.

Assessment Method

Examine

Interview

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

3. Regolamentazioni correlate

Ticket collegati

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final