CM-2(3): Retention Of Previous Configurations

Control Family:

Configuration Management

Parent Control:

CM-2: Baseline Configuration

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

PR.DS-7
PR.IP-1
DE.AE-1

Baselines:

Moderate
High

Next Version:

NIST Special Publication 800-53 Revision 5:
CM-2(3): Retention of Previous Configurations

Control Statement

The organization retains [Assignment: organization-defined previous versions of baseline configurations of the information system] to support rollback.

Supplemental Guidance

Retaining previous versions of baseline configurations to support rollback may include, for example, hardware, software, firmware, configuration files, and configuration records.