Change Management — FedRAMP KSI Domain
Generated from the official FedRAMP/docs GitHub repo. Source path:
FRMR.documentation.jsononmainat blob5c6bfee74029. FRMR version:0.9.43-beta· upstreamlast_updated:2026-04-08. The officialFedRAMP/rulesrepo exists, but grclanker still treatsFedRAMP/docsas the active source until structured rules land there.
Change Management
Domain code: CMT · Domain ID: KSI-CMT · Web slug: change-management
Theme
A secure cloud service provider will ensure that all changes are properly documented and configuration baselines are updated accordingly.
Indicators
KSI-CMT-LMC (formerly KSI-CMT-01) — Logging Changes
Log and monitor modifications to the cloud service offering.
Mapped Rev5 controls: au-2, cm-3, cm-3.2, cm-4.2, cm-6, cm-8.3, ma-2
Terms: Cloud Service Offering
Recent update: 2026-02-04 — Removed italics and changed the ID as part of new standardization in v0.9.0-beta; no material changes.
KSI-CMT-RMV (formerly KSI-CMT-02) — Redeploying vs Modifying
Execute changes to machine-based information resources through redeployment of version controlled immutable resources rather than direct modification wherever reasonable.
Mapped Rev5 controls: cm-2, cm-3, cm-5, cm-6, cm-7, cm-8.1, si-3
Terms: Information Resource, Machine-Based (information resources)
Recent update: 2026-02-04 — Removed italics and changed the ID as part of new standardization in v0.9.0-beta; no material changes.
KSI-CMT-RVP (formerly KSI-CMT-04) — Reviewing Change Procedures
Persistently review the effectiveness of documented change management procedures.
Mapped Rev5 controls: cm-3, cm-3.2, cm-3.4, cm-5, cm-7.1, cm-9
Terms: Persistently
Recent update: 2026-02-04 — Removed italics and changed the ID as part of new standardization in v0.9.0-beta; no material changes.
KSI-CMT-VTD (formerly KSI-CMT-03) — Validating Throughout Deployment
Automate persistent testing and validation of changes throughout deployment.
Mapped Rev5 controls: cm-3, cm-3.2, cm-4.2, si-2
Terms: Persistent Validation, Persistently
Recent update: 2026-02-04 — Removed italics and changed the ID as part of new standardization in v0.9.0-beta; no material changes.