CM-2: Baseline Configuration

Statement

• a.

  Develop, document, and maintain under configuration control, a current baseline configuration of the system; and

• b.

  Review and update the baseline configuration of the system:

  • 1.

    frequency ;

  • 2.

    When required due to circumstances ; and

  • 3.

    When system components are installed or upgraded.

• • (b)(1) Guidance:

    Significant change is defined in NIST Special Publication 800-37 Revision 2, Appendix F.