Guide for Security-Focused Configuration Management of Information Systems

Johnson, A., Dempsey, K., Ross, R., Gupta, S., & Bailey, D. (2011). Guide for Security-Focused Configuration Management of Information Systems.

Type

Report

Intellectual base

Grey literature

Year

2011

DOI

10.6028/nist.sp.800-128

DOI registrant

National Institute of Standards and Technology

Link

https://doi.org/10.6028/NIST.SP.800-128

Cited by

4 citations across 4 artifacts.

Each citation links to the sentence it supports in the citing article.

Domain-specific

• Hardening (computing)
  • The entry is defensive and high-level; it provides no intrusion, evasion, credential, exploit, or bypass procedure and does not replace platform-specific authorized guidance.

Mechanisms

• Configuration Changelog
  • A changelog with gaps is worse than none, because it invites confident wrong conclusions about a system whose real changes went unrecorded — the classic hazard of configuration drift, where the running system silently diverges from every record of it.

    This sourceRequires recorded, current baseline configurations and documented change control so deployed configurations do not diverge from the approved record.

• Configuration Template
  • Its strength is leverage across instances: one well-shaped template makes an entire fleet's controls legible, review-able, and safe-by-default, and turns configuration drift

    This sourceRecommends approved secure baseline configurations deployed centrally and automated monitoring that reports deviations from the baseline.

• Emergency Change Alert
  • Modeled on the emergency-change path in change management

    This sourceDefines an expedited emergency-change path reserved for rare urgent cases despite its greater disruption.

Verification

Does it exist? Confirmed. This work's DOI resolves to a registered record, which fixes its identity. That is all it fixes.

Does it back the claim? Not recorded. Neither this nor any other of the 4 citations of this work carries a recorded support check.

Support is checked per citation rather than per work — the same source can be cited soundly in one article and wrongly in another. Per-citation recording began recently, so a citation with no recorded check is a gap in the record rather than evidence it went unchecked.

See how references were verified.

Registry ID ref:b7156991c455 · see in the full table