← Back to catalog
SA-10(2)
Alternative Configuration Management Processes
System and Services Acquisition (SA)
Baselines
Low · Not includedModerate · Not includedHigh · Not included
Description
Provide an alternate configuration management process using organizational personnel in the absence of a dedicated developer configuration management team.
Discussion
Alternate configuration management processes may be required when organizations use commercial off-the-shelf information technology products. Alternate configuration management processes include organizational personnel who review and approve proposed changes to systems, system components, and system services and conduct security and privacy impact analyses prior to the implementation of changes to systems, components, or services.
Implementation guidance
No content available.
CSF 2.0 crosswalk
No CSF mappings exist for this control.