manage.get.gov/docs/compliance/dist/system-security-plans/ato/cm-2.2.md
Logan McDonald 1d3dfdb8d5
Add compliance documentation to source control (#116)
* add initial setup of compliance-trestle
2022-09-14 08:46:43 -04:00

1.8 KiB

implementation-status control-origination
c-not-implemented
c-inherited-cloud-gov
c-inherited-cisa
c-common-control
c-system-specific-control

cm-2.2 - [catalog] Automation Support for Accuracy and Currency

Control Statement

Maintain the currency, completeness, accuracy, and availability of the baseline configuration of the system using automated mechanisms.

Control guidance

Automated mechanisms that help organizations maintain consistent baseline configurations for systems include configuration management tools, hardware, software, firmware inventory tools, and network management tools. Automated tools can be used at the organization level, mission and business process level, or system level on workstations, servers, notebook computers, network components, or mobile devices. Tools can be used to track version numbers on operating systems, applications, types of software installed, and current patch levels. Automation support for accuracy and currency can be satisfied by the implementation of CM-8(2) for organizations that combine system component inventory and baseline configuration activities.

Control assessment-objective

the currency of the baseline configuration of the system is maintained using automated mechanisms; the completeness of the baseline configuration of the system is maintained using automated mechanisms; the accuracy of the baseline configuration of the system is maintained using automated mechanisms; the availability of the baseline configuration of the system is maintained using automated mechanisms.


What is the solution and how is it implemented?

Add control implementation description here for control cm-2.2