+6.3. Configuration management
---+6.3.1. The relevant entities shall take the appropriate measures to establish, document, implement …
---+6.3.2. For the purpose of point 6.3.1, the relevant entities shall: (a) lay down and ensure …
---+6.3.3. The relevant entities shall review and, where appropriate, update configurations at planned …
|
6.3. Configuration management
6.3. Configuration management
1. Overview
| Summary |
Regulation |
|
6.3.1. The relevant entities shall take the appropriate measures to establish, document, implement …
|
|
6.3.1.
|
The relevant entities shall take the appropriate measures to establish, document, implement, and monitor configurations, including security configurations of hardware, software, services and networks.
|
|
|
6.3.2. For the purpose of point 6.3.1, the relevant entities shall: (a) lay down and ensure …
|
|
6.3.2.
|
For the purpose of point 6.3.1, the relevant entities shall:
|
(a)
|
lay down and ensure security in configurations for their hardware, software, services and networks;
|
|
(b)
|
lay down and implement processes and tools to enforce the laid down secure configurations for hardware, software, services and networks, for newly installed systems as well as for systems in operation over their lifetime.
|
|
|
|
6.3.3. The relevant entities shall review and, where appropriate, update configurations at planned …
|
|
6.3.3.
|
The relevant entities shall review and, where appropriate, update configurations at planned intervals or when significant incidents or significant changes to operations or risks occur.
|
|
,
1.1 References
1.2 Identified Requirements
1.3 Related Standards
2. Identified Requirements
Requirements
| Source |
Requirement |
3. Related Standards
Standards
| Source |
Requirement |
Linked Issues
|