PR.PS-01 Configuration management practices are established and applied

Statement

Configuration management practices are established and applied

Guidance

Establish, test, deploy, and maintain hardened baselines that enforce the organization's cybersecurity policies and provide only essential capabilities (i.e., principle of least functionality)

Guidance

Review all default configuration settings that may potentially impact cybersecurity when installing or upgrading software

Guidance

Monitor implemented software for deviations from approved baselines

1. Преглед

1.1 Препратки

• 6.3 Configuration management

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

3. Свързани регулации

Свързани задачи

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final