Skip to content
ATO Pathways
  Log In

SA-10: Developer Configuration Management

An OSCAL Control

Statement

    • Require the developer of the system, system component, or system service to:

      • a.

        Perform configuration management during system, component, or service ;

      • b.

        Document, manage, and control the integrity of changes to ;

      • c.

        Implement only organization-approved changes to the system, component, or service;

      • d.

        Document approved changes to the system, component, or service and the potential security and privacy impacts of such changes; and

      • e.

        Track security flaws and flaw resolution within the system, component, or service and report findings to .