Developer Configuration Management

class

Management

family

System and Services Acquisition

number

SA-10

priority

P1

impact

MODERATE_HIGH

The organization requires that information system developers/integrators: Perform configuration management during information system design, development, implementation, and operation; Manage and control changes to the information system; Implement only organization-approved changes; Document approved changes to the information system; and Track security flaws and flaw resolution.

Comments