CM-6.1: Automated Management, Application, and Verification

configuration settings for system components are managed using automated mechanisms ;

configuration settings for system components are applied using automated mechanisms ;

configuration settings for system components are verified using automated mechanisms .

Configuration management policy

procedures addressing configuration settings for the system

configuration management plan

system design documentation

system configuration settings and associated documentation

system component inventory

common secure configuration checklists

change control records

system audit records

system security plan

privacy plan

other relevant documents or records

Organizational personnel with security configuration management responsibilities

organizational personnel with information security and privacy responsibilities

system/network administrators

system developers

Organizational processes for managing configuration settings

automated mechanisms implemented to manage, apply, and verify system configuration settings