Requirement

2.3.4: Establish and maintain standard security configurations

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

Establish and maintain standard security configurations, ideally one template for each type of device across the organisation. This applies to operating systems (client and server), firewalls, network equipment, applications and hardware. a) All management of security configurations should be centralised and standardised for each type of device. b) The configuration should be reviewed and updated regularly to eliminate the latest vulnerabilities and attack vectors. c) Changes to the configuration should follow the organisation’s process for change management and be overseen by authorised staff. d) Security configurations must only be changed by authorised operating staff and not be able to be changed by end users on their clients.

Fulfill this requirement by completing the tasks below ->

This requirement is part of the framework:

NSM ICT Security Principles (Norway)

Other requirements of the framework

2.3.4: Establish and maintain standard security configurations

Best practices

How to implement:

2.3.4: Establish and maintain standard security configurations

This policy on

2.3.4: Establish and maintain standard security configurations

provides a set concrete tasks you can complete to secure this topic. Follow these best practices to ensure compliance and strengthen your overall security posture.

Read below what concrete actions you can take to improve this ->

Frameworks that include requirements for this topic:

No items found.

How to improve security around this topic

In Cyberday, requirements and controls are mapped to universal tasks. A set of tasks in the same topic create a Policy, such as this one.

Here's a list of tasks that help you improve your information and cyber security related to

2.3.4: Establish and maintain standard security configurations

Task name

Priority

Task completes