HOME

CM-2 (3)

CM-2 (3) H M
Description

The organization retains [Assignment: organization-defined previous versions of baseline configurations of the information system] to support rollback.

FedRAMP
  • H CM-2 (3) [organization-defined previous versions of baseline configurations of the previously approved baseline configuration of IS components]
DISA Cloud Computing SRG

the previous approved baseline configuration of IS components for a minimum of 3 month

Source:
DoD RMF TAG

Supplemental Guidance

Retaining previous versions of baseline configurations to support rollback may include, for example, hardware, software, firmware, configuration files, and configuration records.