CMMC Practice CM.2.061: Establish and maintain baseline configurations and inventories of organizational systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles.
CMMC CLARIFICATION (Ref CMMC – Appendix B)
Build and configure systems from a known, secure, and approved configuration baseline. This includes:
- documenting the software and configuration settings of a system;
- placement within the network; and
- other specifications as required by the organization.
An effective cybersecurity program depends on system and component configuration and management.