CM-8(6): Assessed Configurations and Approved Deviations
(Not part of any baseline)
- NIST Special Publication 800-53 Revision 4:
- CM-8(6): Assessed Configurations / Approved Deviations
Include assessed component configurations and any approved deviations to current deployed configurations in the system component inventory.
Assessed configurations and approved deviations focus on configuration settings established by organizations for system components, the specific components that have been assessed to determine compliance with the required configuration settings, and any approved deviations from established configuration settings.