CMMC 2.0 • LEVEL 1 • CONFIGURATION MANAGEMENT
CM.L1-3.4.1 — Baseline Configuration
Develop and maintain under configuration control, a current baseline configuration of the system. Review and update the baseline configuration of the system annually or following significant system changes, security incidents, or new vulnerability disclosuresCMMC/STIG and when system components are installed or modified.
Assessment Objectives
- a current baseline configuration of the system is developed.
- a current baseline configuration of the system is maintained under configuration control.
- the baseline configuration of the system is updated annually or following significant system changes, security incidents, or new vulnerability disclosuresCMMC/STIG.
- the baseline configuration of the system is reviewed when system components are installed or modified.
- the baseline configuration of the system is updated when system components are installed or modified.
- the baseline configuration of the system is reviewed annually or following significant system changes, security incidents, or new vulnerability disclosuresCMMC/STIG.
Practitioner Notes
Practitioner commentary coming soon.