Back to all 93 controls
Annex A 8.9
Technological
A.8.9 Configuration management
Manage system configurations.
What good looks like
Hardening baselines (CIS) applied and monitored for drift.
Evidence an auditor will ask for
Baselines, configuration management tool reports.
Put this control into practice
Check whether your organisation already meets Annex A 8.9 with the free Gap Analysis tool, or get implementation-ready templates for every Annex A control with the Document Pack.