CM-2(3): Retention of Previous Configurations

Control Family:

Configuration Management

Parent Control:

CM-2: Baseline Configuration

CSF v1.1 References:

PR.DS-7
PR.IP-1
DE.AE-1

Baselines:

Moderate
High

Previous Version:

NIST Special Publication 800-53 Revision 4:
CM-2(3): Retention Of Previous Configurations

Control Statement

Retain [Assignment: organization-defined number] of previous versions of baseline configurations of the system to support rollback.

Supplemental Guidance

Retaining previous versions of baseline configurations to support rollback include hardware, software, firmware, configuration files, configuration records, and associated documentation.