Configuration Management (03.05)

Configuration Management (CM) requires organizations to establish and maintain baseline configurations for all information system components, track and control changes, and ensure that only authorized modifications are implemented. It includes maintaining an inventory of hardware and software, documenting updates, and reviewing changes for security impact.