NIST SP 800-128
Controlling Configuration Changes

NIST SP 800-128 SecCM-CHANGE-5: Retention of Configuration Records

Retain previous versions of baseline configurations and change records for a defined period to support rollback, forensic analysis, audit, and trend analysis of configuration drift over time.

Other controls in Controlling Configuration Changes

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.