600.436 High-Assurance Systems
Fall 01/Development Process Assurance
11
Authorization
Controls
¨Developer shall
use a CM system
–shall provide measures such that only authorised changes are made to the configuration items
¨Developer shall
provide CM documentation
–Shall include a CM Plan that describes how the CM system is used
–Shall include evidence that all configuration items have been and are being effectively maintained under the CM system and that demonstrates that the CM system is operating in accordance with the CM plan.