Changes to the DoD information system are assessed for IA and accreditation impact prior to implementation.
MAC / CONF
MACI MACII MACIII
Security Design and Configuration
Arbitrary changes to DoD information systems have the potential to affect not only the primary system but any interconnected system as well. All changes must be analyzed for IA and accreditation impact prior to implementation to maintain system stability and accreditation.
1. A formal process that identifies changes that will affect IA and accreditation impact shall be developed. 2. The CCB and the DIACAP Team shall work together to assess system changes for IA and accreditation impact prior to implementation.
DoDI 8500.2, Information Assurance (IA) Implementation, para. E3.3.8, 06 February 2003
ANSI/EIA-649 Configuration Management, “National Consensus Standard for Configuration Management”, July 1998