Configuration Management (CM)
12 controls
- CM-1 Configuration Management Policy and Procedures
- CM-2 Baseline Configuration
- CM-3 Configuration Change Control
- CM-3(2) Testing, Validation, and Documentation of Changes
- CM-4 Security Impact Analysis
- CM-5 Access Restrictions for Change
- CM-6 Configuration Settings
- CM-7 Least Functionality
- CM-8 Information System Component Inventory
- CM-10 Software Usage Restrictions
- CM-11 User-installed Software
- CM-100 Prohibited Technologies
Revision History
Last Updated: February 21, 2025
Previous Versions:
- June 29, 2023
- May 31, 2022
- March 25, 2021
- September 16, 2019