CM-2(3): Retention of Previous Configurations
Control Family:
Parent Control:
Baselines:
- Moderate
- High
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- CM-2(3): Retention Of Previous Configurations
Control Statement
Retain [Assignment: organization-defined number] of previous versions of baseline configurations of the system to support rollback.
Supplemental Guidance
Retaining previous versions of baseline configurations to support rollback include hardware, software, firmware, configuration files, configuration records, and associated documentation.