ISC2 Certified in Cybersecurity (CC)Security OperationsMedium
A global technology company is expanding its operations and introducing new cloud services. To ensure the security of these new services, they need to establish a process for consistently applying security baselines and configurations across all new deployments. Which security operations practice is MOST directly responsible for this consistency?
- AAsset management
- BPatch management
- CConfiguration management
- DChange management
Show answer & explanationAnswer & explanation
Correct answer: C. Configuration management
Configuration management is the practice of maintaining and controlling the configurations of IT systems and software. It ensures that all systems adhere to established security baselines and are consistent across the environment, which is crucial for new cloud service deployments.
Why the other options are wrong
- A. Asset management tracks and inventories IT assets, but doesn't directly enforce their security configurations.
- B. Patch management deals with applying software updates and fixes, which is a part of maintaining a secure configuration, but not the overarching practice for baseline consistency.
- D. Change management controls the process of implementing changes, but configuration management specifies *what* those changes should be to maintain baselines.
Configuration Management
The process of maintaining and controlling the configurations of IT systems and software to ensure consistency, security, and integrity.
- Establishes and enforces security baselines.
- Prevents configuration drift.
- Crucial for compliance and operational efficiency.
Memory trick: Configurations keep everything in line, like a strict librarian.