SP 800-128SP 800Finalpublication

SP 800-128 - Guide for Security-Focused Configuration Management of Information Systems

Provides guidelines for managing the configuration of information systems with a focus on security. Addresses configuration management planning, implementation, and monitoring as part of the system development lifecycle.

View on NIST.gov

Publication Number

800-128

Series

SP 800

Status

Final

Date

2019-06

configuration managementsecurity configurationbaseline configurationchange control

References(3)

SP 800-37r2SP 800-37 Rev. 2 - Risk Management Framework for Information Systems and Organizations SP 800-53r5SP 800-53 Rev. 5 - Security and Privacy Controls for Information Systems and Organizations SP 800-40r4SP 800-40 Rev. 4 - Guide to Enterprise Patch Management Planning