Reference and guide to SFIA version 7. Framework status: Development.

Configuration management CFMG

Changes from SFIA 6 to 7added removed

SFIA7 The lifecycle planning, management, control and management governance of the assets of an organisation (such as documentation, software organisational and service assets, including information relating to those project assets and their relationships. This involves artefacts. The identification, classification and specification of all configuration items (CIs) and their interrelationships. Identifying the interfaces configuration / version of software, systems, documents and services at distinct points in time in order to other processes systematically control changes to the configuration and data. Required information relates to storage, access, service relationships, versions, problem reporting maintain the integrity and change control of CIs. The application of status accounting and auditing, often in line with acknowledged external criteria such as ISO 9000, ISO/IEC 20000, ISO/IEC 27000 and security throughout all stages traceability of the CI lifecycle, including configuration throughout the early stages project, system and service life cycle. Identifying and documenting the functional and physical characteristics of system development. configuration items, control changes to those characteristics, record and report change processing and implementation status. The verification of compliance with specified internal and external requirements.

Configuration management: Level 6

Changes from SFIA 6 to 7added removed

Manages the organisation's configuration management system Develops organisational policies, standards, guidelines and champions the business value and company policies quality targets for secure configuration management. Ensures that processes are in place Develops new methods and organisational capabilities (including automation) for consistent classification configuration management. Champions the importance and management of CIs, and for verification and audit value of configuration records. Contributes strongly management. Provides guidance and resources to the business service knowledge management system. Manages the research drives adoption of and development of tools, processes adherence to policies and techniques. standards. Measures and monitors adherence to standards.

Configuration management: Level 5

Changes from SFIA 6 to 7added removed

Manages configuration items (CIs) Identifies, evaluates and related information. Investigates and implements manages the adoption of appropriate tools, techniques and processes (including automation) for managing CIs and verifies that related configuration management to ensure information is complete, current and accurate. Contributes to development of organisational configuration management policies and standards. Manages configuration items and related information.

Configuration management: Level 4

Changes from SFIA 6 to 7added removed

Maintains Populate and maintains secure configuration, applying and maintaining tools, techniques and processes to identify, track, log and maintain accurate, complete and current information. Verifies and approves changes ensuring protection of assets and components from unauthorised change, diversion and inappropriate use. Develops and configures tools to enable automation of configuration management tasks. Report on the status of configuration management. Identify problems and issues and recommend corrective actions.

Configuration management: Level 3

Changes from SFIA 6 to 7added removed

Applies tools, techniques and processes to track, log and correct information related to CIs, ensuring protection of assets and components from unauthorised change, diversion and inappropriate use. configuration items. Establishes configuration base lines following defined procedures.

Configuration management: Level 2

No proposed changes for SFIA 7

Applies tools, techniques and processes to track, log, report on and correct configuration items, components and changes.