CM-2 Baseline Configuration
Last Review: 10/1/22
Statement
West Texas A&M University must develop, document, and maintain a current baseline configuration of its information systems. Baseline configurations must be updated when new configurations are needed.
Applicability
This Control applies to all West Texas A&M network information resources. The intended audience for this Control includes all information resource owners, custodians, and users of information resources.
Implementation
Information system owners, or their designee must develop, document, and maintain a current baseline configuration. Each configuration baseline must go through a security risk assessment, and vulnerability scan.
Baseline configurations shall be review and updated upon the following conditions:
- An annual review
- Upon major upgrades such as OS version changes or upgrade of primary application.