8.9
Configuration Management
Establish, document, implement, monitor, and review configurations, including security configurations, of hardware, software, services, and networks.
-
5.4.2.1 The organization shall implement secure configurations for all their devices by:a. changing all default passwords;b. by turning off unnecessary features i.e., block unused ports, disable unused services, remove unused or obsolete software; andc. by enabling all relevant security features.
-
-
