+CM-02 [L] Baseline Configuration

CM-02 [L] Baseline Configuration

Control

  1. Develop, document, and maintain under configuration control, a current baseline configuration of the system; and
  2. Review and update the baseline configuration of the system:
    1. [Assignement: frequency];
    2. When required due to [Assignement: circumstances] ; and
    3. When system components are installed or upgraded.

Discussion

Baseline configurations for systems and system components include connectivity, operational, and communications aspects of systems. Baseline configurations are documented, formally reviewed, and agreed-upon specifications for systems or configuration items within those systems. Baseline configurations serve as a basis for future builds, releases, or changes to systems and include security and privacy control implementations, operational procedures, information about system components, network topology, and logical placement of components in the system architecture. Maintaining baseline configurations requires creating new baselines as organizational systems change over time. Baseline configurations of systems reflect the current enterprise architecture.

Assessment Objective

    1. a current baseline configuration of the system is developed and documented;
    2. a current baseline configuration of the system is maintained under configuration control;
    1. the baseline configuration of the system is reviewed and updated [Assignement: frequency];
    2. the baseline configuration of the system is reviewed and updated when required due to [Assignement: circumstances];
    3. the baseline configuration of the system is reviewed and updated when system components are installed or upgraded.

Assessment Method

Examine

Configuration management policy procedures addressing the baseline configuration of the system configuration management plan enterprise architecture documentation system design documentation system security plan privacy plan system architecture and configuration documentation system configuration settings and associated documentation system component inventory change control records other relevant documents or records

Interview

Organizational personnel with configuration management responsibilities organizational personnel with information security and privacy responsibilities system/network administrators

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
is blocked by CM-02 [L] Baseline Configuration – Assessment Procedure
is blocked by Secure Baseline Configurations
is blocked by Baseline Configuration Reviews & Updates