Develop, document and implement a configuration management plan that addresses roles, responsibilities, processes and procedures, establishes the identification and management of configuration items through the life cycle, defines the system's configuration items and places them under configuration management, is reviewed and approved by the information security and configuration management personnel, and is protected from unauthorised disclosure and modification.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.