graphgrc

SCF - CFG-02.5 - Configure Systems, Components or Services for High-Risk Areas

Mechanisms exist to configure systems utilized in high-risk areas with more restrictive baseline configurations.

Mapped framework controls

ISO 27002

NIST 800-53

Control questions

Does the organization configure systems utilized in high-risk areas with more restrictive baseline configurations?