PR.PS-01 Configuration management practices are established and applied

Statement

Configuration management practices are established and applied

Guidance

Establish, test, deploy, and maintain hardened baselines that enforce the organization's cybersecurity policies and provide only essential capabilities (i.e., principle of least functionality)

Guidance

Review all default configuration settings that may potentially impact cybersecurity when installing or upgrading software

Guidance

Monitor implemented software for deviations from approved baselines

1. Przegląd

1.1 Odwołania

• 6.3 Configuration management

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

3. Powiązane regulacje

Powiązane zgłoszenia

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final