Secure configurations are established and maintained as part of the asset deployment process where feasible
Context and Guidance: Secure configuration of assets should be considered prior to deployment in a production environment where feasible. The organisation should consider measures such as applying patches, enabling host-based protections, configuring logging to support higher-level analysis, and disabling unnecessary default accounts prior to deploying an asset.
Related Practices • Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: ARCHITECTURE-3e, ARCHITECTURE-3f, ARCHITECTURE-3l.