Control domain
Secure configuration & hardening
Establishing and enforcing secure baselines and removing insecure defaults across assets.
11 requirements across 8frameworks & regulations.
- ISO 27001EquivalentA.8.9 Configuration management
- NIST CSF 2.0EquivalentPR.PS-01 Configuration management practices established
- CIS Controls v8Equivalent4.1 Establish and maintain a secure configuration process
- NIST 800-53EquivalentCM-6 Configuration settings
- NIST 800-171Equivalent3.4.2 Establish and enforce security configuration settings
- PCI DSSEquivalentReq. 2 Apply secure configurations to all system components
- Cyber EssentialsEquivalentCE-2 Secure configuration
- Cyber EssentialsPartialCE-1 Firewalls
- Essential EightPartialE8-5 Application control
- Essential EightPartialE8-6 Restrict Microsoft Office macros
- Essential EightPartialE8-7 User application hardening