From the course: CompTIA SecurityX (CAS-005) Cert Prep

Unlock this course with a free trial

Join today to access over 24,300 courses taught by industry experts.

Change and configuration management

Change and configuration management

- So before we can even engage in change and configuration management, we have to know what assets we have. That's critical. The CIS, the Top 18, number one of the CIS Top 18 is know what your hardware is, and number two, know what your software is. Without those two things, you can't even put in place change and configuration management, you can't do risk management, so we need to begin with a lifecycle of asset management, which is really a four-phase or a four-stage lifecycle. In phase 1, we're going to call that the planning phase or the plan phase. So, our objective here is to establish our requirements for physical and logical or virtual assets, which is going to involve, you know, what are our needs for our organization? This may be for a different site, different part of the campus. So what are our needs? Allocate a budget. What is the budget for this? And then we're going to define what is going to make us successful? What are our key performance indicators for asset…

Contents