Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

SP 800-128

Guide for Security-Focused Configuration Management of Information Systems

Date Published: August 2011

Author(s)

L. Johnson (NIST), Kelley Dempsey (NIST), Ron Ross (NIST), Sarbari Gupta (Electrosoft Services), Dennis Bailey (Electrosoft Services)

Abstract

Keywords

Configuration management; information systems; security program; risk management framework; security-focused continuous monitoring; SecCM; control; monitoring; security content automation protocol (SCAP)
Control Families

Configuration Management;

Documentation

Publication:
SP 800-128 (DOI)
Local Download

Supplemental Material:
None available