CM-3(1) - Configuration Change Control | Automated Documentation, Notification, and Prohibition of Changes
Use [Assignment: organization-defined automated mechanisms] to:
(a) Document proposed changes to the system;
(b) Notify [Assignment: organization-defined approval authorities] of proposed changes to the system and request change approval;
(c) Highlight proposed changes to the system that have not been approved or disapproved within [Assignment: organization-defined time period];
(d) Prohibit changes to the system until designated approvals are received;
(e) Document all changes to the system; and
(f) Notify [Assignment: organization-defined personnel] when approved changes to the system are completed.
Tracking and auditing changes at a granular level are significant for space missions integrating multiple payloads or third-party modules. When a new configuration is authorized, enabling a different sensor mode, this enhancement ensures that every step, from developer sign-off to final upload, is logged in a coordinated ledger. Any modifications to bus interfaces, cryptographic key sets, or sensor firmware are captured, preserving an audit trail. This practice helps mission teams confirm that each updated element aligns with the official engineering baseline and swiftly detects unexpected or unauthorized changes that could degrade the spacecraft’s performance.
This requirement is focused on software and firmware flaws. If hardware flaw remediation is required, refine the requirement to make this clear.
SPR-417
The [organization] shall use automated mechanisms to: prohibit changes to the system until designated approvals are received; document all implemented changes to the system; document proposed changes to the system; highlight proposed changes to the system that have not been approved or disapproved by [time_period]; notify [authorities] of proposed changes to the system and request change approval; notify [personnel] when approved changes to the system are completed; and prohibit changes to the system until designated approvals are received.{SV-AC-4,SV-SP-9}{CM-3(1)}