The approved preventive measures are:

ment activities in the overall change control process, except: configuration identification, configuration status accounting, configuration verification and audit, configuration change control; 24. Configuration verification and audit are