cfg-02-systemhardeningthroughbaselineconfigurations.md

SCF - CFG-02 - System Hardening Through Baseline Configurations

Mechanisms exist to develop, document and maintain secure baseline configurations for technology platforms that are consistent with industry-accepted system hardening standards.

Mapped framework controls

ISO 27002

• A.8.12
• A.8.25
• A.8.26
• A.8.3
• A.8.5
• A.8.9

NIST 800-53

• CM-2
• CM-6
• PL-10
• SA-8

SOC 2

• CC7.1
• CC8.1

Control questions

Does the organization develop, document and maintain secure baseline configurations for technology platforms that are consistent with industry-accepted system hardening standards?