Skip to content

Configuration Item

What is Configuration Item?

A component of IT infrastructure that needs to be managed to deliver services, tracked and maintained through configuration management.

Governance

What the standards actually require on configuration item

Requirements naming configuration item across 6 standards, quoted from the control text.

COBIT 20198 controls

The repository of configuration items is kept current by recording every configuration change in it: changes to CIs are identified regularly, proposed changes are reviewed against the baseline for completeness and accuracy, configuration details are updated on...

cobit-2019::BAI10.03 · BAI10.03 Maintain and control configuration items →

The manufacturer plans for configuration items to be brought under documented configuration control before verification takes place. Applies to classes B and C.

iec-62304-2015-medical-device-software-lifecycle-processes::5.1.11 · 5.1.11 Software configuration item control before verification →

Define the properties needed to modify and control the configuration items, for single items or groups, such as a status model (under work, tested, released), storage location and access rights, implemented as item attributes.

automotive-spice-aspice-v4-1-process-assessment-model::SUP.8.BP2 · SUP.8.BP2 Define the configuration item properties →
ISO 10007:20176 controls

The configuration items chosen, and how they relate, should reflect the product structure or the service capability. Items should be picked using set criteria, choosing entities that allow their functional and physical characteristics to be controlled on their...

iso-10007-2017::5.3.1 · Product structure or service capability and selection of configuration items →
NIST SP 800-1285 controls

Identify the configuration items, the system components placed under configuration management and treated as a single entity for control.

SP800-128-CONFIG-ITEMS · Configuration Items →

Each configuration item and its components are uniquely identified. Table A-8 objective 1, described in 7.1.a; applies at levels A, B, C, D, no independence required; activities 7.2.1; outputs SCM Records.

do-178c-ed-12c-software-considerations-in-airborne-systems::A-8.1 · Configuration items identified →

Questions people ask about configuration item

What is Configuration Item?
A component of IT infrastructure that needs to be managed to deliver services, tracked and maintained through configuration management.
Why is Configuration Item important for compliance?
Configuration Item is a key concept in Governance. Understanding configuration item helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Configuration Item?
Configuration Item appears in the requirement text of COBIT 2019, IEC 62304:2015 Medical Device Software Lifecycle Processes, Automotive SPICE (ASPICE) v4.1 - Process Assessment Model, ISO 10007:2017, NIST SP 800-128. Across these standards we have identified 37 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Configuration Item?
Explore our compliance framework pages to see how configuration item applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Configuration Item applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.