Configuration management control best refers to:

A.
The use of privileged-entity controls for system administrator functions.

B.
Implementing resource protection schemes for hardware control.

C.
The concept of least control in operations.

D.
Ensuring that changes to the system do not unintentionally diminish security.

Explanation:
The correct answer is “Ensuring that changes to the system do not unintentionally diminish
security”. Configuration Management Control (and Change Control) are processes to ensure that any
changes to the system are managed properly and do not inordinately affect either the availability or
security of the system.