Review changes to the system [Assignment: organization-defined frequency] or when [Assignment: organization-defined circumstances] to determine whether unauthorized changes have occurred.
|
|
| Control Identifier | CM-3(7) |
| Latest Sync Date | 19/12/24 09:18:14 |
| Discussion | Indications that warrant a review of changes to the system and the specific circumstances justifying such reviews may be obtained from activities carried out by organizations during the configuration change process or continuous monitoring process. |
| Related Controls | AU-6, AU-7, CM-3. |