FedRAMP Controls / CM

CM-4 Impact Analyses

Family CM
Baselines moderate
Mapped KSIs 1

Control statement

Analyze changes to the system to determine potential security and privacy impacts prior to change implementation.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

Covered by these Key Security Indicators

KSITitleCategory
KSI-AFR-05Significant Change Notifications
Determine how significant changes will be tracked and how all necessary parties will be notified in alignment with the FedRAMP Significant Change Notifications (SCN) process and persistently address all related requirements and recommendations.
Authorization by FedRAMP