CM-2(3): Retention of Previous Configurations

Control Family:

Configuration Management

Parent Control:

CM-2: Baseline Configuration

CSF v1.1 References:

CSF v2.0 References:

PR.PS-01

PF v1.0 References:

Threats Addressed:

Tampering

Baselines:

Moderate
High
OT Moderate (SP 800-82r3)
OT High (SP 800-82r3)

Previous Version:

NIST Special Publication 800-53 Revision 4:
CM-2(3): Retention Of Previous Configurations

Control Statement

Retain [Assignment: organization-defined number] of previous versions of baseline configurations of the system to support rollback.

Supplemental Guidance

Retaining previous versions of baseline configurations to support rollback include hardware, software, firmware, configuration files, configuration records, and associated documentation.