PR.PS-01 Configuration management practices are established and applied

Statement

Configuration management practices are established and applied

Guidance

Establish, test, deploy, and maintain hardened baselines that enforce the organization's cybersecurity policies and provide only essential capabilities (i.e., principle of least functionality)

Guidance

Review all default configuration settings that may potentially impact cybersecurity when installing or upgrading software

Guidance

Monitor implemented software for deviations from approved baselines

1. Επισκόπηση

1.1 Παραπομπές

• 6.3 Configuration management

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

3. Σχετικοί κανονισμοί

Συνδεδεμένα ζητήματα

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final