CM-2 (3) - Retention of Previous Configurations
Control requirements
CM-2 (3) - 0
Retain [Assignment: organization-defined number] of previous versions of baseline configurations of the system to support rollback.
NIST supplemental guidance
Retaining previous versions of baseline configurations to support rollback include hardware, software, firmware, configuration files, configuration records, and associated documentation.