The primary goal of the Configuration Management (CM) Policy and supporting documents is to ensure that systems are configured securely and maintained in a consistent, known, and authorized state. This collection of documents defines changes which need to go through formal change management and describes how to perform change management. They contain required security configurations for all systems, system baselines, data ownership tracking, secure configurations, inventory, least privilege, cryptographic key management, and licensing.