whether the guidelines for configuration flags are followed;

whether change control protocols are followed and change records are available; whether traceability is maintained between the specification note, the software product and the change request;;; functional configuration audit, physical configuration audit implementation of the configuration audit