Many of the NIST controls have variables or elements that need to be defined in order to implement a control. In some cases, the same control may require multiple versions with different parameters to reflect the relative importance or other criteria for different information systems.
From the Approved Controls grid, select the control you would like to assign/change from the grid. The Control Configurations and Control Details landing page will appear. You will also see the available configurations for the control. Select the Information System you would like to assign a new configuration for by clicking on the > on the line representing the appropriate system in the lower grid of Information Systems. The current configuration assigned to that system will be highlighted in blue.
Click on the Options icon and choose Edit from the top right corner of the Information System Control page. The current configuration for the control is highlighted in blue control configuration short name.
Select the appropriate control configuration for this system from the available options by clicking the proper icon. The control details will reflect the variables of the designated configuration. Click on the Save Edits when done.
Note: In control edit mode, Users can also modify the Control Owner for this system or deactivate the control for THIS SYSTEM.
Users are returned to the System Control screen now displaying the new control configuration for the Information System. Click on the control breadcrumb link from the top of the screen to return to the primary control screen. The edited system will now appear only in the Implementations grid area that reflects the control configuration assigned to it.
