---

id: "CM-03(03)" title: "Automated Change Implementation" family: "CM" family_name: "Configuration Management" sort_id: "cm-03.03" priority: "P1" implementation_level: "organization" parent: "CM-03" enhancement: True

---

Statement

Implement changes to the current system baseline and deploy the updated baseline across the installed base using {{ insert: param, cm-03.03_odp }}.

Guidance

Automated tools can improve the accuracy, consistency, and availability of configuration baseline information. Automation can also provide data aggregation and data correlation capabilities, alerting mechanisms, and dashboards to support risk-based decision-making within the organization.

Assessment Objective: changes to the current system baseline are implemented using {{ insert: param, cm-03.03_odp }};

Assessment Objective: the updated baseline is deployed across the installed base using {{ insert: param, cm-03.03_odp }}.

Configuration management policy

configuration management plan

procedures addressing system configuration change control

system design documentation

system architecture and configuration documentation

automated configuration control mechanisms

change control records

system component inventory

system audit records

system security plan

other relevant documents or records

Organizational personnel with configuration change control responsibilities

organizational personnel with information security responsibilities

system/network administrators

system developers

members of change control board or similar

Organizational processes for configuration change control

automated mechanisms implementing changes to current system baseline