Configuration Standard
What is Configuration Standard?
A documented specification of approved settings and parameters for configuring systems securely and consistently.
Frameworks that govern configuration standard
What the standards actually require on configuration standard
Requirements naming configuration standard across 6 standards, quoted from the control text.
Configuration standards exist for each type of 3DS system and are implemented on the systems. The assessor reads the standards and build procedures, inspects live configurations and interviews administrators.
pci-3ds-core-security-standard::P1-3.2.3 · P1-3.2.3 Configuration standards defined and applied to every 3DS system type →The entity must have configuration standards for the rulesets of its network security controls, and those standards must be defined, put into effect on the devices, and kept maintained over time.
1.2.1 · 1.2.1 Ruleset configuration standards for NSCs →Configuration standards covering every server, network device and system component, virtual images, snapshots and the hypervisor included, consistent with industry-accepted hardening standards.
mtcs-singapore::14.2 · Server and network device configuration standards →Architecture and configuration standards are updated on the strength of threat intelligence.
ffiec-cybersecurity-assessment-tool-cat::D2.MA.Ma.A.4 · D2.MA.Ma.A.4 Monitoring and Analyzing (Advanced 4) →Advanced control principles for threat monitoring and analysis (required, with baseline and intermediate, of an AI whose inherent risk is high). Threat intelligence sources covering every part of the threat profile are prioritised and monitored;
hkma-cyber-resilience-assessment-framework-c-raf::4.4.A · 4.4 Threat monitoring and analysis: advanced level →SIG risk domain M, Endpoint Security. The third party secures laptops, desktops and mobile devices used to deliver the service through configuration standards, protection against malware, encryption, device management and control of what connects to the enviro...
sig-shared-assessments::M · Secure end user devices that access the service →Questions people ask about configuration standard
What is Configuration Standard?
Why is Configuration Standard important for compliance?
Which compliance frameworks address Configuration Standard?
Where can I learn more about Configuration Standard?
See how Configuration Standard applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.