2.2.6System components are configured and managed securely

Defined Approach Requirements:

System security parameters are configured to prevent misuse.

Defined Approach Testing Procedures:

2.2.6.a Examine system configuration standards to verify they include configuring system security parameters to prevent misuse.

2.2.6.b Interview system administrators and/or security managers to verify they have knowledge of common security parameter settings for system components.

2.2.6.c Examine system configurations to verify that common security parameters are set appropriately and in accordance with the system configuration standards.