CM-9(1)—Assignment Of Responsibility
>Control Description
Enterprises should ensure that all relevant roles are defined to address configuration management activities for information systems and networks. Enterprises should ensure that requirements and capabilities for configuration management are appropriately addressed or included in the following supply chain activities: requirements definition, development, testing, market research and analysis, procurement solicitations and contracts, component installation or removal, system integration, operations, and maintenance.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.