CFM-07—Configuration Checks
>Control Description
Theme
Type
Policy/Standard
Infrastructure Management Policy>Implementation Guidance
1. Ensure that security hardening and configuration baselines are being monitored for in-scope servers. 2. Deviations shall be generated for in-scope servers for which remediations shall be tracked to closure. 3. Design a process for security hardening and configuration baselines checks being accurate and updated at least annually.
>Testing Procedure
1. Validate that security hardening and configuration baselines are being monitored for in-scope servers. 2. Validate that deviations are being generated for in-scope servers and remediations are tracked to closure. 3. Validate that the security hardening and configuration baselines checks are accurate and updated at least annually.
>Audit Artifacts
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.