The objective of Configuration Manager and control is "not to" document all proposed or actual changes to an IS & to assess the impact of changes on security of system. Response:

The statement claims the objective is 'not to' document changes and assess impact. This is false because a primary objective of configuration management and control is precisely to document all proposed and actual changes to an information system and to assess their potential impact on the system's security posture. This process ensures that changes are controlled, tracked, and evaluated before implementation to prevent security vulnerabilities.

Believing the statement is true would imply that configuration management does not involve documenting changes or assessing security impact, which contradicts the core principles and objectives of configuration management in information security.