Security Configuration
What is Security Configuration?
The specific settings and parameters applied to systems and applications to implement security controls and reduce vulnerabilities.
Terms that appear alongside security configuration
Each of these is named in at least one of the same controls as security configuration. The number is how many controls name both.
- secure configuration 2 shared controls
- baseline 2 shared controls
- hardening 2 shared controls
- vulnerability 2 shared controls
- policy 2 shared controls
Frameworks that govern security configuration
What the standards actually require on security configuration
Requirements naming security configuration across 6 standards, quoted from the control text.
Annex A disclosure item (Security configurations) that a public provider completes for each cloud service: Whether checks that security configurations are enforced are manual or automated, and how often they run, up to continuously.
mtcs-singapore::A.21 · Disclosure: Security configuration enforcement checks →The component shall be configurable in line with the network and security configuration guidelines its supplier recommends, and provide an interface to the current settings. RE 1 adds reporting of the configuration in a machine-readable form.
iec-62443::CR 7.6 · Network and security configuration settings →Use centralised tooling to simplify and manage network security configuration across a complex environment rather than maintaining rules device by device.
ASBv3-NS-7 · Simplify network security configuration →The CBS shall allow configuration per the supplier's recommended network and security settings and provide an interface to view the settings in force. (from SR 7.6 of IEC 62443-3-3)
iacs-unified-requirements-e26e27-cyber-resilience-of-ships-and-on-board-systems::E27-4.1-29 · E27 item 29: Network and security configuration settings →Define security configuration settings for the IT products used in the system and enforce those settings in operation.
CM.L2-3.4.2 · Security Configuration Enforcement →Configuration is managed continuously to preserve minimum functionality and least privilege, adapt to authorised needs, react to vulnerabilities and incidents, and be changed only by authorised staff;
spain-ens::op.exp.3 · Security configuration management →Questions people ask about security configuration
What is Security Configuration?
Why is Security Configuration important for compliance?
Which compliance frameworks address Security Configuration?
Where can I learn more about Security Configuration?
See how Security Configuration applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.