PROCEEDINGS OF EIE's 2ND INTERNATIONAL CONFERENCE ON COMPUTING, ENERGY, NETWORKING, ROBOTICS AND TELECOMMUNICATIONS eieCon2012 Editors

Abstract

Computer System configuration management (CSCM) is a field of management that focuses on establishing and
maintaining consistency of a system's or product's performance and its functional and physical attributes with its
requirements, design, and operational information throughout its life. For information assurance, CSCM can be
defined as the management of security features and assurances through control of changes made to hardware,
software, firmware, documentation, test, test fixtures, and test documentation throughout the life cycle of an
information system. CSCM for information assurance, is sometimes referred to as Secure Configuration
Management, relies upon performance, functional, and physical attributes of IT platforms and products and their
environments to determine the appropriate security features and assurances that are used to measure a system
configuration state. For example, system configuration requirements may be different for a network firewall that
functions as part of an organization's Internet boundary versus one that functions as an internal local network
firewall.
Keywords: Secure Configuration Management, systematic control, original equipment manufacturers (OEMs),
configuration identification, information technology (IT), and preventive maintenance.