A group of qualified people with responsibility for the process of regulating and approving changes to hardware, firmware, software, and documentation throughout the development and operational life cycle of an information system.
Source(s):
NIST SP 800-128
under Configuration Control Board
from
CNSSI 4009