Requirements for 03.04: Configuration Management

  1. 03.04.01: Baseline Configuration

  2. 03.04.02: Configuration Settings

  3. 03.04.03: Configuration Change Control

  4. 03.04.04: Impact Analyses

  5. 03.04.05: Access Restrictions for Change

  6. 03.04.06: Least Functionality

  7. 03.04.08: Authorized Software – Allow by Exception

  8. 03.04.10: System Component Inventory

  9. 03.04.11: Information Location

  10. 03.04.12: System and Component Configuration for High-Risk Areas