CM-1 CM-1 (a) High High The organization conducting Internal Web Portal (1) Moderate Moderate the inspection/assessment Low Low obtains and examines the configuration management policy via the inspected organization's information sharing capability (e.g. portal, intranet, email, etc.) to ensure it has been disseminated. CM-1 CM-1 (a) High High The organization conducting (2) Moderate Moderate the inspection/assessment Low Low obtains and examines the procedures to facilitate the implementation of the configuration management policy and associated configuration management controls. CM-1 CM-1 (a) High High The organization conducting Internal Web Portal (2) Moderate Moderate the inspection/assessment Low Low obtains and examines the procedures to facilitate the implementation of the configuration management policy and associated configuration management controls via the inspected organization's information sharing capability (e.g. portal, intranet, email, etc.) to ensure it has been disseminated. CM-1 CM-1 (b) High High The organization conducting (1) Moderate Moderate the inspection/assessment Low Low obtains and examines documentation of occurrence of reviews and update actions for the configuration management policy to ensure annual review and necessary updates are occurring. DoD has defined the frequency as annually. CM-1 CM-1 (b) High High The organization being Automatically (1) Moderate Moderate inspected/assessed is compliant with this Low Low automatically compliant with CCI because they are this CCI because they are covered at the DoD covered at the DoD level. level DoD has defined the frequency as annually.
CM-1 CM-1 (a) (1) High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the configuration management policy via the inspected organization's information sharing capability (e.g. portal, intranet, email, etc.) to ensure it has been disseminated. Internal Web Portal CM-1 CM-1 (a) (2) High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the procedures to facilitate the implementation of the configuration management policy and associated configuration management controls. CM-1 CM-1 (a) (2) High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the procedures to facilitate the implementation of the configuration management policy and associated configuration management controls via the inspected organization's information sharing capability (e.g. portal, intranet, email, etc.) to ensure it has been disseminated. Internal Web Portal CM-1 CM-1 (b) (1) High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines documentation of occurrence of reviews and update actions for the configuration management policy to ensure annual review and necessary updates are occurring. DoD has defined the frequency as annually. CM-1 CM-1 (b) (1) High Moderate Low High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as annually. Automatically compliant with this CCI because they are covered at the DoD level
RMF_Configuration-Management-Plan.docx