+CM-08(06) Assessed Configurations and Approved Deviations

CM-08(06) Assessed Configurations and Approved Deviations

Control

Include assessed component configurations and any approved deviations to current deployed configurations in the system component inventory.

Discussion

Assessed configurations and approved deviations focus on configuration settings established by organizations for system components, the specific components that have been assessed to determine compliance with the required configuration settings, and any approved deviations from established configuration settings.

Assessment Objective

  1. assessed component configurations are included in the system component inventory;
  2. any approved deviations to current deployed configurations are included in the system component inventory.

Assessment Method

Examine

Configuration management policy procedures addressing system component inventory configuration management plan system security plan system design documentation system component inventory system configuration settings and associated documentation change control records system security plan other relevant documents or records

Interview

Organizational personnel with component inventory management responsibilities organizational personnel with assessment responsibilities organizational personnel with information security responsibilities system/network administrators

1. Overzicht

1.1 Referenties

1.2 Geïdentificeerde eisen

1.3 Gerelateerde regelingen

2. Geïdentificeerde eisen

Eisen

3. Gerelateerde regelingen

Regelingen

Gekoppelde issues

Koppelingen
is blocked by CM-08(06) Assessed Configurations and Approved Deviations – Assessment Procedure
is blocked by Approved Configuration Deviations