Skip to content
ATO Pathways
  Log In

CM-3.1: Automated Documentation, Notification, and Prohibition of Changes

An OSCAL Control

    • automated mechanisms

      mechanisms used to automate configuration change control are defined;
    • approval authorities

      approval authorities to be notified of and request approval for proposed changes to the system are defined;
    • time period

      the time period after which to highlight changes that have not been approved or disapproved is defined;
    • personnel

      personnel to be notified when approved changes are complete is/are defined;