CM-3 What is the solution and how is it implemented? Part a Part b Part c Part d Part e Part f Part g CM-4 Security Impact Analysis The organization analyzes changes to the information system to determine potential security impacts prior to change implementation. CM-4 Control Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , CM-4 What is the solution and how is it implemented? CM-5 Access Restrictions for Change The organization defines, documents, approves, and enforces physical and logical access restrictions associated with changes to the information system.
CM-3 What is the solution and how is it implemented? Part a Part b Part c Part d Part e Part f Part g CM-4 Security Impact Analysis The organization analyzes changes to the information system to determine potential security impacts prior to change implementation. CM-4 Control Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , CM-4 What is the solution and how is it implemented? CM-5 Access Restrictions for Change The organization defines, documents, approves, and enforces physical and logical access restrictions associated with changes to the information system.
FedRAMP-SSP-Template-LowModerate-2016-06-20-v03-00.docx