id: "CM-03(08)" title: "Prevent or Restrict Configuration Changes" family: "CM" family_name: "Configuration Management" sort_id: "cm-03.08" priority: "P1" implementation_level: "system" parent: "CM-03" enhancement: True
Statement
Prevent or restrict changes to the configuration of the system under the following circumstances: {{ insert: param, cm-03.08_odp }}.
Guidance
System configuration changes can adversely affect critical system security and privacy functionality. Change restrictions can be enforced through automated mechanisms.
Assessment Objective
changes to the configuration of the system are prevented or restricted under {{ insert: param, cm-03.08_odp }}.
Configuration management policy
procedures addressing system configuration change control
configuration management plan
change control records
system architecture and configuration documentation
system configuration settings and associated documentation
system component inventory
system audit records
system security plan
other relevant documents or records