| AID | 49 |
|---|---|
| Domain | Change Control and Configuration Management |
| CID | CCC-06 |
| Control | Change Management Baseline |
| Control Specification | Establish change management baselines for all relevant authorized changes on organization assets. Review and update the change management baseline at least annually or upon significant changes. |
| Control Type | Cloud & AI Related |
| AI CAIQ ID | CCC-06.2 |
| AI CAIQuestionnaire | Is the change management baseline reviewed an updated at least annually or upon significant changes? |
| NIST AI 600-1 Mapping | MS-2.9-002<br /> MG-3.2-002 <br /> GV-1.6-001<br /> GV-1.6-002<br /> GV-6.1-008<br /> MP-2.1-001<br /> GV-6.1-008<br /> MG-2.2-002<br /> MG-3.2-003<br /> GV-1.3-002<br /> MS-2.8-003<br /> GV-1.6-001 |
Reference: https://cloudsecurityalliance.org/artifacts/ai-controls-matrix