PW.9.2 Implement the default settings (or groups of default settings, if applicable), and document each setting for software administrators.

Statement

Implement the default settings (or groups of default settings, if applicable), and document each setting for software administrators.

Example 1:

Verify that the approved configuration is in place for the software.

Example 2:

Document each setting’s purpose, options, default value, security relevance, potential operational impact, and relationships with other settings.

Example 3:

Use authoritative programmatic technical mechanisms to record how each setting can be implemented and assessed by software administrators.

Example 4:

Store the default configuration in a usable format and follow change control practices for modifying it (e.g., configuration-as-code).

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

Linkede sager

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final