This policy establishes a standard server configuration regimen that implements clear policies and standards. This policy demonstrates what the enterprise servers are and how they are to be managed and updated. The server configuration policy determines appropriate access controls, baseline security, physical security controls, etc. within an information system.
Risks Addressed by Policy:
- Without this policy, servers will be installed, used, and maintained improperly.