CM.2.066 Analyze the security impact of changes prior to implementation.

CMMC Practice CM.2.066: Analyze the security impact of changes prior to implementation.

Links to Publicly Available Resources

CMMC CLARIFICATION (Ref CMMC – Appendix B)

You should analyze the potential security impact of changes before implementing them. Changes to complex environments can cause unforeseen problems to systems and environments. You should perform an analysis that focuses on the security impact of changes. This can uncover potential problems before you implement the change. By doing so, you can help mitigate unforeseen problems.