Configuration Management
What is Configuration Management?
A process for systematically managing, organizing, and controlling changes to system configurations to maintain integrity and traceability.
Terms that appear alongside configuration management
Each of these is named in at least one of the same controls as configuration management. The number is how many controls name both.
- baseline 29 shared controls
- change control 19 shared controls
- integrity 16 shared controls
- nist 15 shared controls
- policy 15 shared controls
- vulnerability 14 shared controls
- audit 13 shared controls
- remediation 13 shared controls
Frameworks that govern configuration management
What the standards actually require on configuration management
Requirements naming configuration management across 6 standards, quoted from the control text.
During the project, every controlled item that has undergone review, approval or test is placed under configuration management and change management from its first formal approval, at a level of formality that grows as the project advances, so that specificati...
gamp-5-good-automated-manufacturing-practice::4.2.5.2 · 4.2.5.2 Project Change and Configuration Management →Require the developer of the system, system component, or system service to enable integrity verification of hardware components.
NIST800-SA-10(3) · SA-10(3) Developer Configuration Management | Hardware Integrity Verification →Develop, document and implement a configuration management plan that addresses roles, responsibilities, processes and procedures, establishes the identification and management of configuration items through the life cycle, defines the system's configuration it...
fbi-cjis-security-policy::CM-9 · CM-9 Configuration Management Plan →Establish the SecCM policy and procedures that address purpose, scope, roles, responsibilities, and compliance.
SP800-128-POLICY · Configuration Management Policy and Procedures →Management controls the configurations of systems, applications and other technology through policies and procedures that set minimally acceptable baselines, updates baselines and confirms security settings when systems change, tracks, verifies and reports con...
ffiec-it-examination-handbook::IS-II.C.10(a) · II.C.10(a) Configuration Management (Information Security) →Develop, document, and implement a configuration management plan for the system that: a. Addresses roles, responsibilities, and configuration management processes and procedures; b.
nist-sp-800-53-revision-5-1-high::CM-9 · CM-9 Configuration Management Plan →Questions people ask about configuration management
What is Configuration Management?
Why is Configuration Management important for compliance?
Which compliance frameworks address Configuration Management?
Where can I learn more about Configuration Management?
See how Configuration Management applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.