CM - Configuration Management

CM addresses the establishment and maintenance of secure configurations for information system components, requiring organizations to define baseline settings, track hardware and software inventories, and control changes through documented change-control processes. It also mandates regular assessments to verify that configurations remain consistent with approved baselines and that unauthorized modifications are detected and corrected.