CM-03 (01)Configuration Change Control | Automated Documentation, Notification, and Prohibition of Changes

Use [Assignment: organization-defined automated mechanisms] to:

(a) Document proposed changes to the system;

(b) Notify [Assignment: organization-defined approval authorities] of proposed changes to the system and request change approval;

(c) Highlight proposed changes to the system that have not been approved or disapproved within [Assignment: organization-defined time period];

(d) Prohibit changes to the system until designated approvals are received;

(e) Document all changes to the system; and

(f) Notify [Assignment: organization-defined personnel] when approved changes to the system are completed.