CISA Cyber Resilience Review (CRR) v4.0
Configuration and Change Management – CISA Cyber Resilience Review (CRR) v4.0

CISA Cyber Resilience Review (CRR) v4.0 CCM.1: The lifecycle of assets is managed

What does CCM.1 require?

A change management process governs modifications to assets, resilience requirements are re-evaluated when assets change, capacity management and planning are performed, change requests are tracked to closure, affected stakeholders are notified of changes, and a system development life cycle manages the systems supporting the critical service.

Maintained by Gerard Blokdyk

Other controls in Configuration and Change Management – CISA Cyber Resilience Review (CRR) v4.0

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.