In addition to ensuring that changes to the computer system take place in an identifiable and
controlled environment, configuration management provides assurance that future changes:
A.
The application software cannot bypass system security features.
B.
Do not adversely affect implementation of the security policy.
C.
The operating system is always subjected to independent validation and verification.
D.
In technical documentation maintain an accurate description of the Trusted Computer Base.
Explanation:
“The primary security goal of configuration management is to ensure that changes
to the system do not unintentionally diminish security.” Pg 306 Krutz: CISSP Prep Guide: Gold
Edition.
check
0
0
Diminishing Security is much different from ‘implementation of Security Policy’.
0
0