Secure Controls Framework

1,534 controls across 34 domains

Source: SCF 2026.2About SCF
securecontrolsframework.com
Back to catalog
CHG-05CHGChange Management

Stakeholder Notification of Changes

Description

Mechanisms exist to ensure stakeholders are made aware of and understand the impact of proposed changes.

Cross-Mappings

60 paths across 3 frameworks
NIST 800-531 mapping
CM-9
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · related
CCI51 mappings
CCI-000286
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · related
  • Secure Controls Framework · 2026.2 · scf_strm · subset
  • Secure Controls Framework · 2026.2 · scf_strm · superset
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000287
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · related
  • Secure Controls Framework · 2026.2 · scf_strm · subset
  • Secure Controls Framework · 2026.2 · scf_strm · superset
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000289
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · related
  • Secure Controls Framework · 2026.2 · scf_strm · subset
  • Secure Controls Framework · 2026.2 · scf_strm · superset
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000290
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · related
  • Secure Controls Framework · 2026.2 · scf_strm · subset
  • Secure Controls Framework · 2026.2 · scf_strm · superset
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000292
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · related
  • Secure Controls Framework · 2026.2 · scf_strm · subset
  • Secure Controls Framework · 2026.2 · scf_strm · superset
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000421
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000422
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000423
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000424
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-000425
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent

+41 more (top 10 by confidence shown)

STIG4 mappings
SV-222630r961863_ruleThe Configuration Management (CM) repository must be properly patched and STIG compliant.
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 6 · disa_xccdf · related
SV-222631r961863_ruleAccess privileges to the Configuration Management (CM) repository must be reviewed every three months.
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 6 · disa_xccdf · related
SV-222632r961863_ruleA Software Configuration Management (SCM) plan describing the configuration control and change management process of application objects developed by the organization and the roles and responsibilities of the organization must be created and maintained.
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 6 · disa_xccdf · related
SV-222633r961863_ruleA Configuration Control Board (CCB) that meets at least every release cycle, for managing the Configuration Management (CM) process must be established.
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 6 · disa_xccdf · related

Control mappings provided by the Secure Controls Framework (SCF).

SCF

Powered by the Secure Controls Framework

The control catalog, cross-mappings, and STRM relationship data shown here are provided by the Secure Controls Framework (SCF), 2026.2. Every mapping is credited to SCF as the methodology, with the SCF reference and version stored alongside it.

© SCF Council, LLC. Secure Controls Framework content is free and shown here with attribution. securecontrolsframework.com · About SCF on STIGViewer