E.3.5 Baseline configuration

Control Details

Objective

Provide the starting point for tracking changes to components, code, and settings throughout the SDLC

Definition

Establish a baseline configuration of the information system and the development environment, including documenting, formally reviewing, and securing the agreement of stakeholders. The baseline provides a starting point for tracking changes to components, code, and settings for traceability and provenance.

Assessment Questions

1. How is a baseline configuration of the information system and development environment initialized to provide a starting point for tracking changes to components, code, and/or settings for traceability and provenance?
2. Who sets the baseline?

Reference sources

1. 800-161 CM-2