Configuration control

{
  "id": "MLC-T-CYB-000876",
  "term": "Configuration control",
  "field": "Cybersecurity",
  "definition": "1. Process of controlling modifications to hardware, firmware, software, and documentation to protect the information system against improper modifications prior to, during, and after system implementation.\n\n2. Process for controlling modifications to hardware, firmware, software, and documentation to protect the information system against improper modifications before, during, and after system implementation.\n\n3. Process for controlling modifications to hardware, firmware, software, and documentation to ensure the information system is protected against improper modifications before, during, and after system implementation.\n\n4. Process for controlling modifications to hardware, firmware, software, and documentation to protect the system against improper modifications before, during, and after system implementation.",
  "references": [
    "CNSSI 4009-2022",
    "NIST SP 800-128 from CNSSI 4009-2022; NIST SP 800-128; NIST SP 800-137; NIST SP 800-37 Rev. 2",
    "NIST SP 800-82r3 from CNSSI 4009-2022 (adapted)",
    "NIST SP 800-53 Rev. 5 from NIST SP 800-128",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/configuration-control/"
}