Skip to content

CM-3: Configuration Change Control

An OSCAL Control

    • time period

      the time period to retain records of configuration-controlled changes is defined;

    • configuration change control element

      the configuration change control element responsible for coordinating and overseeing change control activities is defined;

    • frequency

      the frequency at which the configuration control element convenes is defined (if selected);

    • configuration change conditions

      configuration change conditions that prompt the configuration control element to convene are defined (if selected);