Performing Configuration Management
Configuration management (CM) is making sure that devices on the network are configured according to the standards set by the organization. As an example, if the organization requires every laptop to run XDR, then making sure that XDR agents are installed and operating correctly is part of CM. Similarly, hardening systems is part of CM.
A significant amount of work is required on all your systems before you can be ready for incident response. For example, you may need to deploy endpoint protection and monitoring tools, do some baselining to understand what is normal on a given system, and think about automating some of the responses. CM is systematically organizing and controlling changes to system configurations to ensure consistency, stability, and compliance across all IT systems. It includes provisioning, backup, endpoint protection, vulnerability and configuration management, logging and monitoring, and baselining. These are discussed in...
