CFM-01—Baseline Configuration Standard

1. Validate whether Security hardening and Baseline configuration standards are established. 2. Inspect baseline configuration of systems (systems can include AWS, Azure, GCP, and more) shall be configured with the baseline configuration. 3. Validate whether the required permissions are present for the configuration management server. 4. Inspect Security Groups, NACLs, and virtual firewall appliances configurations. 5. Validate whether VPC Firewall Rules and virtual firewall appliances are configured to allow traffic from the configuration management server to the other system servers. 6. Inspect production systems to determine whether they demonstrate consistent system configurations via version control #, last update date, settings, or other. 7. For a sample of in scope servers validate whether latest version patch (hardened as per industry practices) is applied wherever possible. 8. Validate that security hardening and configuration baselines are monitored are flagged wherever deviation is observed. 9. Validate that regular rule set reviews are conducted by relevant teams for network devices.