CM-2.3: Retention of Previous Configurations

Configuration management policy

procedures addressing the baseline configuration of the system

configuration management plan

system architecture and configuration documentation

system configuration settings and associated documentation

copies of previous baseline configuration versions

system security plan

other relevant documents or records

Organizational personnel with configuration management responsibilities

organizational personnel with information security responsibilities

system/network administrators

Organizational processes for managing baseline configurations