Guides
- NIST SP 800-128 – Guide for Security-Focused Configuration Management of Information Systems
- MITRE – Systems Engineering Guide – Configuration Management Tools
- SANS Institute – Configuration Management in the Security World
3.4.1 Establish and maintain baseline configurations and inventories of organizational information systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles.
To go back to the NIST 800-171 Controls page, click here.