Configuration Management
Establish and maintain baseline configurations and inventories.
Configuration management asks you to know what you run, keep it in a known state, change it deliberately, and strip out what is not needed. Baselines, inventories, change control and software restrictions live here. Six of its nine requirements carry five points.
- 3.4.1 Know what you have and how it is set up
- 3.4.2 Enforce your settings
- 3.4.3 Track changes
- 3.4.4 Think before you change
- 3.4.5 Restrict who can change what
- 3.4.6 Turn off what you do not need
- 3.4.7 Close unnecessary ports and services
- 3.4.8 Decide what software may run
- 3.4.9 Control what users install