Understanding Configuration Management in NIST 800-171 & CMMC 2.0