Summary

Control changes to configuration items.

Description

Control is maintained over the configuration of the work product baseline. This control includes tracking the configuration of each configuration item, approving a new configuration if necessary, and updating the baseline.

The acquirer decides which configuration items require version control, or more stringent levels of configuration control, and establishes mechanisms to ensure configuration items are controlled. Although the supplier can manage configuration items on the acquirer’s behalf, the acquirer is responsible for approval and control of changes to these configuration items.

Example Work Products



  1. Revision history of configuration items
  2. Archives of baselines


Subpractices



1. Control changes to configuration items throughout the life of the product or service.

2. Obtain appropriate authorization before changed configuration items are entered into the configuration management system.

 

For example, authorization can come from the CCB, the project or acquisition manager, or the customer.



3. Check in and check out configuration items in the configuration management system for incorporation of changes in a manner that maintains the correctness and integrity of configuration items.

 

Examples of check-in and check-out steps include the following:
  • Confirming that the revisions are authorized
  • Updating the configuration items
  • Archiving the replaced baseline and retrieving the new baseline
  • Commenting on the changes made to the item
  • Tying changes to related work products such as requirements and acceptance criteria



4. Perform reviews to ensure that changes have not caused unintended effects on the baselines (e.g., ensure that changes have not compromised the safety or security of the system).

5. Record changes to configuration items and reasons for changes as appropriate.

If a proposed change to the work product is accepted, a schedule is identified for incorporating the change into the work product and other affected areas.

Configuration control mechanisms can be tailored to categories of changes. For example, the approval considerations could be less stringent for component changes that do not affect other components. Changed configuration items are released after review and approval of configuration changes. Changes are not official until they are released.