The organization documents a configuration management plan for the information system that establishes a process for managing the configuration of the configuration items.
No STIG checks reference this CCI.