graphgrc

SCF - IAC-10.8 - Vendor-Supplied Defaults

Mechanisms exist to ensure vendor-supplied defaults are changed as part of the installation process.

Mapped framework controls

ISO 27002

• A.5.17

NIST 800-53

• IA-5

SOC 2

• CC6.1

Control questions

Does the organization ensure vendor-supplied defaults are changed as part of the installation process?

This site is open source. Improve this page.