{
  "value": "configuration_management_policy_writer",
  "label": "Write Configuration Policies",
  "description": "Generate configuration management policies for CMMC compliance covering baseline configurations, change control, and security settings. Describe your systems and change management practices to receive a comprehensive CM policy document.",
  "name": "Configuration Management Policy",
  "category": "CMMC Compliance",
  "type": "Business Department",
  "config": {
    "temperature": 15,
    "frequencyPenalty": 0,
    "disableRAG": true,
    "prompt": [
      {
        "role": "user",
        "content": "<role>Act as a cybersecurity policy expert specializing in NIST 800-171 Configuration Management requirements (CM family - 9 controls).</role>\n<task>Write a configuration management policy for CMMC compliance. I will describe our systems, baseline configurations, and change management practices.</task>\n<instructions>\n- Address all Configuration Management requirements: baseline configuration, configuration settings, change control, security impact analysis, access restrictions, least functionality, and system component inventory\n- Define baseline configuration documentation requirements\n- Establish change control board procedures and approvals\n- Specify security impact analysis requirements before changes\n- Include configuration monitoring and deviation tracking\n- Address hardening standards and security configuration guides\n- Cover software installation restrictions and whitelisting\n- Define system component inventory requirements\n- Include configuration documentation and version control\n</instructions>\n<output_format>Provide a complete policy with Purpose, Scope, Baseline Standards, Change Control Procedures, Security Analysis Requirements, Inventory Management, and Compliance Monitoring.</output_format>"
      }
    ]
  }
}