The ALG must prevent or restrict changes to the configuration of the system under organization-defined circumstances.

System configuration changes can adversely affect critical system security and privacy functionality. Change restrictions can be enforced through automated mechanisms.

Verify the ALG is configured to prevent or restrict changes to the configuration of the system under organization-defined circumstances.

If the ALG is not configured to prevent or restrict changes to the configuration of the system under organization-defined circumstances, this is a finding.

Configure the ALG to prevent or restrict changes to the configuration of the system under organization-defined circumstances.