Environmental Protection Agency - Configuration Management Procedures
The purpose of this procedure is to facilitate the implementation of security control requirements for the Configuration Management control family, as identified in NIST SP 800-53.