Configuration Management (CM) ensures that changes to system hardware, software, and firmware are documented, tested, and authorized. This prevents "configuration drift" and ensures that the organization’s security posture remains consistent through automation and baselining.