The organization develops a configuration management plan for the information system that places the configuration items under configuration management.
No STIG checks reference this CCI.