Control configuration

CIP Requirements:

(CIP 003-05 R4)
Establish configuration management activities to identify and document changes to hardware and software components pursuant to the change control process.

(CIP 007-05 R2)
Either separately or as a component of the documented configuration management process, establish and document a security patch management program for tracking, evaluating, testing, and installing applicable cyber security software patches.