Configuration baselines are reviewed and updated periodically and according to defined triggers, such as system changes and changes to the cybersecurity architecture
Context and Guidance: The organisation has a defined schedule for reviewing baselines regularly and updating them as needed to ensure they continue to reflect appropriate security and functional requirements.
Related Practices • Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: ASSET-3a, ASSET-3c, ASSET-3d.