CM-3(1)

  • Requirement

    Use [Assignment: organization-defined automated mechanisms] to:

    1. Document proposed changes to the system;
    2. Notify [Assignment: organization-defined approval authorities] of proposed changes to the system and request change approval;
    3. Highlight proposed changes to the system that have not been approved or disapproved within [Assignment: organization-defined time period];
    4. Prohibit changes to the system until designated approvals are received;
    5. Document all changes to the system; and
    6. Notify [Assignment: organization-defined personnel] when approved changes to the system are completed.

  • Discussion

    None.

More Info

  • Title

    Configuration Change Control | Automated Documentation, Notification, and Prohibition of Changes

  • Family

    Configuration Management

  • NIST 800-53B Baseline(s)

    • High

  • Related NIST 800-53 ID

NIST 800-53A Assessment Guidance

CMMC Training

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!

Learn More