CM.2.061 Establish and maintain baseline configurations and inventories of organizational systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles.

CMMC Practice CM.2.061: Establish and maintain baseline configurations and inventories of organizational systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles.

Links to Publicly Available Resources

CMMC CLARIFICATION (Ref CMMC – Appendix B)

Build and configure systems from a known, secure, and approved configuration baseline. This includes:

  • documenting the software and configuration settings of a system;
  • placement within the network; and
  • other specifications as required by the organization.

An effective cybersecurity program depends on system and component configuration and management.