Business Worksheet for Configuration Management (CM)
IMPACT
ANALYSIS ID
BEFORE PLAN
PERCENT
IMPROVEMENT
NEW VALUE
Quality Management worksheet completed for this element/template? (check box) 
Employees
Prepare for administrator rebellion when you introduce CM. Make the system as easy to
use and transparent as possible.
_______________________________________________________________________
_______________________________________________________________________
_______________________________________________________________________
Customers
To the degree that CM introduces a "rigor" that impacts customer response time,
customer needs should be addressed.
_______________________________________________________________________
_______________________________________________________________________
_______________________________________________________________________
Help customers who are affected by CM to understand its importance.
_______________________________________________________________________
_______________________________________________________________________
_______________________________________________________________________
Explain why you may make noncritical changes only at specified times. Careful CM
procedures sometimes require this.
_______________________________________________________________________
_______________________________________________________________________
_______________________________________________________________________
Owners
List owner expectations in terms of predictability in the incident recovery process. CM
facilitates predictable recovery.
_______________________________________________________________________
_______________________________________________________________________
_______________________________________________________________________
Suppliers and Partners
Work to identify high-impact suppliers/partners with whom you rely on configuration
management. For example, if you are engaged in a business-to-business network, there
may be a need for all businesses to configuration-manage security-related information.
From the book Mission-Critical Security Planner published by John Wiley
and Sons. © 2003, Eric Greenberg. Version 1.0
_______________________________________________________________________
_______________________________________________________________________
_______________________________________________________________________
Drive suppliers/partners to implement needed CM relating to your products/services or
search for those that do.
_______________________________________________________________________
_______________________________________________________________________
_______________________________________________________________________
Information
Identify high-impact information elements crucial to your organization's operation that
demand underlying CM support.
_______________________________________________________________________
_______________________________________________________________________
_______________________________________________________________________
Infrastructure
Your strategy is largely and simply driven by the CM needs of high-impact infrastructure
components. List them.
_______________________________________________________________________
_______________________________________________________________________
_______________________________________________________________________
From the book Mission-Critical Security Planner published by John Wiley
and Sons. © 2003, Eric Greenberg. Version 1.0