03.05.02 - Configuration Change Control

The cm_l_02 entry corresponds to the NIST SP 800-171 Rev 3 control "03.05.02 - Configuration Change Control," which requires organizations to establish and maintain a formal process for managing changes to system configurations. This includes documenting, reviewing, approving, and tracking modifications to ensure that only authorized changes are implemented and that they do not degrade security or introduce vulnerabilities.