+CM-09(01) Assignment of Responsibility

CM-09(01) Assignment of Responsibility

Control

Assign responsibility for developing the configuration management process to organizational personnel that are not directly involved in system development.

Discussion

In the absence of dedicated configuration management teams assigned within organizations, system developers may be tasked with developing configuration management processes using personnel who are not directly involved in system development or system integration. This separation of duties ensures that organizations establish and maintain a sufficient degree of independence between the system development and integration processes and configuration management processes to facilitate quality control and more effective oversight.

Assessment Objective

the responsibility for developing the configuration management process is assigned to organizational personnel who are not directly involved in system development.

Assessment Method

Examine

Configuration management policy procedures addressing responsibilities for configuration management process development configuration management plan system security plan system security plan other relevant documents or records

Interview

Organizational personnel with responsibilities for configuration management process development organizational personnel with information security responsibilities

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti

3. Regolamenti relatati

Regolamenti

Kwistjonijiet marbuta

Links
is blocked by CM-09(01) Assignment of Responsibility – Assessment Procedure
is blocked by Configuration Management Role Assignment