CM-09.1 ยท Assignment of Responsibility

Control Description

Assign responsibility for developing the configuration management process to organizational personnel that are not directly involved in system development.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
organization
Enhancement
Control Statement
The control requirements

Assign responsibility for developing the configuration management process to organizational personnel that are not directly involved in system development.

Supplemental Guidance

In the absence of dedicated configuration management teams assigned within organizations, system developers may be tasked with developing configuration management processes using personnel who are not directly involved in system development or system integration. This separation of duties ensures that organizations establish and maintain a sufficient degree of independence between the system development and integration processes and configuration management processes to facilitate quality control and more effective oversight.