ISO 27001 Annex A 8.9 - Configuration Management Explained

Learn how to implement ISO 27001 Annex A 8.9 Configuration Management and pass the audit. ✅ ISO 27001 Toolkit: https://hightable.io/product/iso-2700... Configurations, including security configurations, of hardware, software, services and networks should be established, documented, implemented, monitored and reviewed. How to implement ISO 27001 Configuration Management The steps to implement Configuration Management ISO 27001 for ISO 27001 Certification are: 1. Have effective asset management and know what assets you have Have an asset management process that includes an asset register. 2. Document your configuration standards Using templates and industry best practice you will document your configuration standards for each asset type. 3. Configure your assets appropriately before use Using the configuration standards that you have developed and approved you will configure your assets appropriately before you deploy them. 4. Monitor your configurations For all asset types you will monitor the configurations to ensure they continue to meet the standards that you have set. 5. Review your configurations On a periodic basis you will review your asset configurations to ensure they are in line with the standards that you have set. 6. Take actions where configurations do not match the templates and standards you have set If you identify that assets are not configured in line with the configuration standards you will take action and follow appropriate internal processes such as risk management and change control to rectify. 7. Implement controls proportionate to the risk posed The controls that you implement and the configuration standards you choose are based on your risk assessment and proportionate to that risk and your business needs. 8. Keep records For audit purposes you will keep records. Examples of the records to keep include changes, updates, monitoring, review and audits. 9. Test the controls that you have to make sure they are working Perform internal audits that include the testing of the controls to ensure that they are working. ► ISO 27001 Configuration Management Guide: https://hightable.io/iso27001-annex-a... #iso27001 #iso27001certification