CM-3(2): Testing, Validation and Documentation of Changes

TAMUS Required By:  08/01/2022 

Review Date:  06/26/2024 

  • Information resource owners or their designee are responsible for determining the types of changes that are configuration-controlled as specified in Control CM-3, Configuration Change Control.   
    • Configuration-controlled changes to Moderate Impact Information Resources should be tested, validated, and documented before finalizing their implementation.  
    • Configuration-controlled changes to High Impact Information Resources must be tested, validated, and documented before finalizing their implementation. 

References/Additional Resources

None.  See any applicable internal procedures.