id: "CM-02(03)" title: "Retention of Previous Configurations" family: "CM" family_name: "Configuration Management" sort_id: "cm-02.03" priority: "P1" implementation_level: "organization" parent: "CM-02" enhancement: True
Statement
Retain {{ insert: param, cm-02.03_odp }} of previous versions of baseline configurations of the system to support rollback.
Guidance
Retaining previous versions of baseline configurations to support rollback include hardware, software, firmware, configuration files, configuration records, and associated documentation.
Assessment Objective
{{ insert: param, cm-02.03_odp }} of previous baseline configuration version(s) of the system is/are retained to support rollback.
Configuration management policy
procedures addressing the baseline configuration of the system
configuration management plan
system architecture and configuration documentation
system configuration settings and associated documentation
copies of previous baseline configuration versions
system security plan
other relevant documents or records
Organizational personnel with configuration management responsibilities
organizational personnel with information security responsibilities
system/network administrators
Organizational processes for managing baseline configurations