3.4 — Configuration Management
52 requirements in the Configuration Management family
3.4.1Baseline Configurations Assessment
3.4.1[a]Baseline Configurations Assessment [a]
3.4.1[b]Baseline Configurations Assessment [b]
3.4.1[c]Baseline Configurations Assessment [c]
3.4.1[d]Baseline Configurations Assessment [d]
3.4.1[e]Baseline Configurations Assessment [e]
3.4.1[f]Baseline Configurations Assessment [f]
3.4.2Security Configuration Settings Assessment
3.4.2[a]Security Configuration Settings Assessment [a]
3.4.2[b]Security Configuration Settings Assessment [b]
3.4.3System Change Management Assessment
3.4.3[a]System Change Management Assessment [a]
3.4.3[b]System Change Management Assessment [b]
3.4.3[c]System Change Management Assessment [c]
3.4.3[d]System Change Management Assessment [d]
3.4.4Security Impact Analysis Assessment
3.4.5Access Restrictions for Change Assessment
3.4.5[a]Access Restrictions for Change Assessment [a]
3.4.5[b]Access Restrictions for Change Assessment [b]
3.4.5[c]Access Restrictions for Change Assessment [c]
3.4.5[d]Access Restrictions for Change Assessment [d]
3.4.5[e]Access Restrictions for Change Assessment [e]
3.4.5[f]Access Restrictions for Change Assessment [f]
3.4.5[g]Access Restrictions for Change Assessment [g]
3.4.5[h]Access Restrictions for Change Assessment [h]
3.4.6Least Functionality Assessment
3.4.6[a]Least Functionality Assessment [a]
3.4.6[b]Least Functionality Assessment [b]
3.4.7Nonessential Functionality Assessment
3.4.7[a]Nonessential Functionality Assessment [a]
3.4.7[b]Nonessential Functionality Assessment [b]
3.4.7[c]Nonessential Functionality Assessment [c]
3.4.7[d]Nonessential Functionality Assessment [d]
3.4.7[e]Nonessential Functionality Assessment [e]
3.4.7[f]Nonessential Functionality Assessment [f]
3.4.7[g]Nonessential Functionality Assessment [g]
3.4.7[h]Nonessential Functionality Assessment [h]
3.4.7[i]Nonessential Functionality Assessment [i]
3.4.7[j]Nonessential Functionality Assessment [j]
3.4.7[k]Nonessential Functionality Assessment [k]
3.4.7[l]Nonessential Functionality Assessment [l]
3.4.7[m]Nonessential Functionality Assessment [m]
3.4.7[n]Nonessential Functionality Assessment [n]
3.4.7[o]Nonessential Functionality Assessment [o]
3.4.8Application Execution Policy Assessment
3.4.8[a]Application Execution Policy Assessment [a]
3.4.8[b]Application Execution Policy Assessment [b]
3.4.8[c]Application Execution Policy Assessment [c]
3.4.9User-Installed Software Assessment
3.4.9[a]User-Installed Software Assessment [a]
3.4.9[b]User-Installed Software Assessment [b]
3.4.9[c]User-Installed Software Assessment [c]