NIST SP 800-128
Controlling Configuration Changes

NIST SP 800-128 SecCM-CHANGE-1: Configuration Change Control Process

Establish a formal change control process requiring submission, review, approval, implementation, verification, and closure of all configuration changes through a Configuration Control Board or equivalent authority.

Other controls in Controlling Configuration Changes

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.