---

id: "CM-07(03)" title: "Registration Compliance" family: "CM" family_name: "Configuration Management" sort_id: "cm-07.03" priority: "P1" implementation_level: "organization" parent: "CM-07" enhancement: True

---

Statement

Ensure compliance with {{ insert: param, cm-07.03_odp }}.

Guidance

Organizations use the registration process to manage, track, and provide oversight for systems and implemented functions, ports, protocols, and services.

Assessment Objective

{{ insert: param, cm-07.03_odp }} are complied with.

System security plan

configuration management policy

procedures addressing least functionality in the system

configuration management plan

system configuration settings and associated documentation

system component inventory

audit and compliance reviews

system audit records

other relevant documents or records

Organizational personnel with security responsibilities

system/network administrators

system developers

Organizational processes ensuring compliance with registration requirements for functions, ports, protocols, and/or services

mechanisms implementing compliance with registration requirements for functions, ports, protocols, and/or services