ISO 10007:2017
Configuration management process – ISO 10007:2017

ISO 10007:2017 5.2: Configuration management planning

Planning underpins the whole process and coordinates configuration management work for a particular context across the life cycle. It produces the configuration management plan, which for a given product or service should be documented, approved and controlled, name the configuration management documented information that will be used, point to the organization's existing documented information wherever it can, and set out the resources, responsibilities, authorities and accountability for configuration management throughout the life cycle. The plan may stand alone, sit within another document or be split across several; a plan supplied by an external provider may be kept as it is or folded in. Annex A offers a structure and contents.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 13 controls across 12 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

  • CJIS-5.7 Configuration Management
  • CJIS-7 Configuration Management

API 1164 · 1 control

  • API1164-08 Configuration Management
  • AESCSF-ACM-2 Configuration management
  • SUP.8 Configuration Management
  • IS-V.A.2 Configuration Management

ISO 19011:2018 · 1 control

  • ISO-26262-8-7 Configuration management

ISO 27002:2022 · 1 control

  • 8.9 Configuration management
  • ISO20000-10 Configuration management

ITIL 4 · 1 control

  • ITIL4-10 Configuration management

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Configuration management process – ISO 10007:2017

Query this from an agent

The graph holds this control, the 13 it maps to, and the evidence behind each claim, over MCP and REST.