CM-4(2): Verification of Controls

Parent Control:

CM-4: Impact Analyses

CSF v1.1 References:

PF v1.0 References:


  • Moderate
  • High

Previous Version:

Control Statement

After system changes, verify that the impacted controls are implemented correctly, operating as intended, and producing the desired outcome with regard to meeting the security and privacy requirements for the system.

Supplemental Guidance

Implementation in this context refers to installing changed code in the operational system that may have an impact on security or privacy controls.