Information Security for Managers

Configuration Management

CHAPTER 19

CONFIGURATION MANAGEMENT (CM) is a formally defined aspect of management that involves creating and maintaining consistency in systems, keeping services available, and meeting performance objectives. In terms of information security, CM is the protection of the integrity of functions and features by controlling changes made to hardware, software, and information throughout the life of an information system. Primary components in CM include the development and implementation of policies, practices, and processes that ensure conformance and consistency of information and systems through proper governance. The assessment and enforcement of CM is done through compliance auditing procedures.

Chapter 19 Topics ...