Approve or disapprove configuration-controlled changes to the system, with explicit consideration for security impact analyses.
No STIG checks reference this CCI.