03.04.01 Baseline Configuration

Statement

• a. Develop and maintain under configuration control, a current baseline configuration of the system.

• b. Review and update the baseline configuration of the system {{ insert: param, A.03.04.01.ODP.01 }} and when system components are installed or modified.

Guidance

Baseline configurations for the system and system components include aspects of connectivity, operation, and communications. Baseline configurations are documented, formally reviewed, and agreed-upon specifications for the system or configuration items within the system. Baseline configurations serve as a basis for future builds, releases, or changes to the system and include information about system components, operational procedures, network topology, and the placement of components in the system architecture. Maintaining baseline configurations requires creating new baselines as the system changes over time. Baseline configurations of the system reflect the current enterprise architecture.

Assessment objective

a current baseline configuration of the system is developed.

Assessment objective

a current baseline configuration of the system is maintained under configuration control.

Assessment objective

the baseline configuration of the system is updated {{ insert: param, A.03.04.01.ODP.01 }}.

Assessment objective

the baseline configuration of the system is reviewed when system components are installed or modified.

Assessment objective

the baseline configuration of the system is updated when system components are installed or modified.

Assessment objective

the baseline configuration of the system is reviewed {{ insert: param, A.03.04.01.ODP.01 }}.

Assessment method

• configuration management policy and procedures procedures for the baseline system configuration configuration management plan enterprise architecture system design documentation system architecture system configuration settings system component inventory change control records system security plan other relevant documents or records

Assessment method

• personnel with configuration management responsibilities personnel with information security responsibilities system administrators

Assessment method

• processes for managing baseline configurations mechanisms for supporting configuration control of the baseline configuration

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

3. Zugehörige Regulierungen

Verknüpfte Vorgänge

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final