CM-2.7: Configure Systems and Components for High-risk Areas

systems or system components with configurations are issued to individuals traveling to locations that the organization deems to be of significant risk;

controls are applied to the systems or system components when the individuals return from travel.

Configuration management policy

configuration management plan

procedures addressing the baseline configuration of the system

procedures addressing system component installations and upgrades

system architecture and configuration documentation

system configuration settings and associated documentation

system component inventory

records of system baseline configuration reviews and updates

system component installations/upgrades and associated records

change control records

system security plan

other relevant documents or records

Organizational personnel with configuration management responsibilities

organizational personnel with information security responsibilities

system/network administrators

Organizational processes for managing baseline configurations