CISA Cyber Resilience Review (CRR) v4.0
Configuration and Change Management – CISA Cyber Resilience Review (CRR) v4.0

CISA Cyber Resilience Review (CRR) v4.0 CCM.3: Asset configuration baselines are established

What does CCM.3 require?

Configuration baselines are created for technology assets with approval required for baseline changes, and baselines of normal network operations and of expected user and system data flows are established and managed.

Maintained by Gerard Blokdyk

Other controls in Configuration and Change Management – CISA Cyber Resilience Review (CRR) v4.0

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.