Description

The university establishes baseline configuration of information resources to ensure changes to information resources are executed consistently in the production environment.

Applicability

  • The intended audience includes information resource owners and custodians; and pertains to information resources considered moderate or high impact.

Implementation

  • 1

    The information resource owner, or designee shall develop, document, and maintain a current baseline configuration for information resources.

  • 2

    Each type of platform or device may have its own particular baseline security configuration and maintenance protocols. Custodians of information resources shall seek and implement recommended configurations (based on manufacturer recommendations or industry best practices) for securing the particular system platforms under their control.