Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
A Configuration Control Board (CCB) that meets at least every release cycle, for managing the Configuration Management (CM) process must be established.
Description
Discussion Text
Software Configuration Management (SCM) is very important in tracking code releases, baselines, and managing access to the configuration management repository. An SCM plan or charter identifies what should be under configuration management control. Without an SCM plan and a CCB, application releases can't be tracked and vulnerabilities can be inserted intentionally or unintentionally into the code base of the application.
This requirement is intended to be applied to application developers or organizations responsible for code management or who have and operate an application CM repository.
This requirement is intended to be applied to application developers or organizations responsible for code management or who have and operate an application CM repository.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.