Chapter 15

Developing a Configuration Management Plan


A Configuration Management Plan shows evidence that software changes, including code, operating system settings, and application configurations, are known and tracked. To ensure that the configuration management terminology that you use in your Configuration Management Plan will have a consistent meaning to all readers, it is a good idea to establish definitions up front and list them near the beginning of your document. Describe the assets controlled by the plan. Describe the configuration management system. Create a flowchart that details the change control process.


Configuration Management Plan; Configuration management; Change control; Configuration Control Board; CCB; Baseline; ...

Get FISMA Compliance Handbook now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.