The global skills and competency framework for the digital world

Configuration management CFMG

The lifecycle planning, control and management of the assets of an organisation (such as documentation, software and service assets, including information relating to those assets and their relationships. This involves identification, classification and specification of all configuration items (CIs) and the interfaces to other processes and data. Required information relates to storage, access, service relationships, versions, problem reporting and change control of CIs. The application of status accounting and auditing, often in line with acknowledged external criteria such as ISO 9000, ISO/IEC 20000, ISO/IEC 27000 and security throughout all stages of the CI lifecycle, including the early stages of system development.


Defined at these levels: 2 3 4 5 6

Configuration management: Level 1

This skill is not typically observed or practiced at this level of responsibility and accountability.

Configuration management: Level 2

Applies tools, techniques and processes to track, log, report on and correct configuration items, components and changes.

Configuration management: Level 3

Applies tools, techniques and processes to track, log and correct information related to CIs, ensuring protection of assets and components from unauthorised change, diversion and inappropriate use.

Configuration management: Level 4

Maintains secure configuration, applying and maintaining tools, techniques and processes to identify, track, log and maintain accurate, complete and current information.

Configuration management: Level 5

Manages configuration items (CIs) and related information. Investigates and implements tools, techniques and processes for managing CIs and verifies that related information is complete, current and accurate.

Configuration management: Level 6

Manages the organisation's configuration management system and champions the business value and company policies for secure configuration management. Ensures that processes are in place for consistent classification and management of CIs, and for verification and audit of configuration records. Contributes strongly to the business service knowledge management system. Manages the research and development of tools, processes and techniques.

Configuration management: Level 7

This skill is not typically observed or practiced at this level of responsibility and accountability.