KSI-CMT-RVPImplementation guide coming soonReviewing Change Procedures
CMT — Change Management
NIST 800-53: cm-3, cm-3.2, cm-3.4, cm-5, cm-7.1, cm-9
- Who this is for
- Cloud service providers
- Service class
- All service classes
- Implementation guidance
- Official source only
- Evidence automation
- Not published
Reviewed implementation guidance for KSI-CMT-RVP is not published yet. The official source below remains complete and authoritative.
Official FedRAMP source
Verbatim from FedRAMP/rules
The effectiveness of documented change management procedures is persistently reviewed.
Content provenance
Official requirement text is sourced from FedRAMP/rules . Boundera implementation guidance has not been fully reviewed for this item.