Security Configuration
What is Security Configuration?
The specific settings and parameters applied to systems and applications to implement security controls and reduce vulnerabilities.
Terms that appear alongside security configuration
Each of these is named in at least one of the same controls as security configuration. The number is how many controls name both.
- secure configuration 2 shared controls
- baseline 2 shared controls
- hardening 2 shared controls
- vulnerability 2 shared controls
- policy 2 shared controls
Frameworks that govern security configuration
What the standards actually require on security configuration
Requirements naming security configuration across 6 standards, quoted from the control text.
Use centralised tooling to simplify and manage network security configuration across a complex environment rather than maintaining rules device by device.
ASBv3-NS-7 · Simplify network security configuration →Define security configuration settings for the IT products used in the system and enforce those settings in operation.
CM.L2-3.4.2 · Security Configuration Enforcement →The IACS shall provide the capability to be configured according to recommended network and security configurations and maintain them across normal operation, restart and recovery.
62443-3-3-FR7-SR-7-6 · Network and Security Configurations →Per RBI Cyber Framework: technical controls. Requirements include (a) Network Security and Segmentation + (b) Secure Configuration and Hardening + (c) Application Security including web + mobile + API + (d) Endpoint protection + EDR + (e) integrate with broade...
RBIBANK-2 · Network Security, Configuration Hardening, Application Security →Gateways undergo testing following configuration changes, and at regular intervals no more than six months apart, to validate they conform to expected security configurations.
ISM-1037 · Gateways undergo testing following configuration changes, and at regular intervals no more →Apply security configuration baselines to mobile devices that disable unneeded features and enforce protective defaults.
800-124r2-3.3 · Device Hardening Baselines →Questions people ask about security configuration
What is Security Configuration?
Why is Security Configuration important for compliance?
Which compliance frameworks address Security Configuration?
Where can I learn more about Security Configuration?
See how Security Configuration applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.