CM-3(8): Prevent or Restrict Configuration Changes

CSF v1.1 References:

Threats Addressed:


(Not part of any baseline)

Info icon.

Control is new to this version of the control set.

Control Statement

Prevent or restrict changes to the configuration of the system under the following circumstances: [Assignment: organization-defined circumstances].

Supplemental Guidance

System configuration changes can adversely affect critical system security and privacy functionality. Change restrictions can be enforced through automated mechanisms.