03.05.01 - Baseline Configuration

The cm_l_01 entry in NIST SP 800-171 Rev 3 defines the requirement to establish and maintain a documented baseline configuration for all information system components that handle Controlled Unclassified Information. It mandates using a secure, approved starting point, tracking changes, and regularly reviewing the baseline to ensure consistency and reduce vulnerability exposure.