CM-2(1): Reviews And Updates

Control Family:

Configuration Management

Parent Control:

CM-2: Baseline Configuration

Priority:

CSF v1.1 References:

Baselines:

  • Moderate
  • High
Warning icon.

Control is withdrawn in the next version of this control set and incorporated into: CM-2: Baseline Configuration.

Control Statement

The organization reviews and updates the baseline configuration of the information system:

  1. [Assignment: organization-defined frequency];
  2. When required due to [Assignment organization-defined circumstances]; and
  3. As an integral part of information system component installations and upgrades.