Secure Configuration Management
- The set of procedures appropriate for controlling changes to a system's hardware and software structure for the purpose of ensuring that such changes will not lead to decreased data security. (AR 380-380; FIPS PUB 39)
- The set of procedures appropriate for controlling changes to a system's hardware and software structure for the purpose of ensuring that changes will not lead to violations of the system's security policy. (NCSC-TG-004-88)