BaselineWatch
Desk

03.04.01 Baseline Configuration

NIST SP 800-171 Rev 3 (CUI; CMMC Level 2) OSCAL 1.1.0 against OSCAL 1.1.0
All changes in this version
unchanged 03.04 Configuration Management

Title

Baseline Configuration

Control

a. Develop and maintain under configuration control, a current baseline configuration of the system.
b. Review and update the baseline configuration of the system [Assignment: frequency] and when system components are installed or modified.

Discussion

Baseline configurations for the system and system components include aspects of connectivity, operation, and communications. Baseline configurations are documented, formally reviewed, and agreed-upon specifications for the system or configuration items within the system. Baseline configurations serve as a basis for future builds, releases, or changes to the system and include information about system components, operational procedures, network topology, and the placement of components in the system architecture. Maintaining baseline configurations requires creating new baselines as the system changes over time. Baseline configurations of the system reflect the current enterprise architecture.

Parameters

A.03.04.01.ODP.01: frequency

Assessment objective

a current baseline configuration of the system is developed.