 CCM can be used for monitoring access control and authorizations, system configurations, and business process settings.CDA and CCM are complementary processes.Neither process is self-sufficient or comprehensive.