CM-2(3): Retention of Previous Configurations

CSF v1.1 References:

Baselines:

  • Moderate
  • High

Previous Version:

Control Statement

Retain [Assignment: organization-defined number] of previous versions of baseline configurations of the system to support rollback.

Supplemental Guidance

Retaining previous versions of baseline configurations to support rollback include hardware, software, firmware, configuration files, configuration records, and associated documentation.