cisco certification vs comptia

cisco certification vs comptia., . Banquet; NIST SP800-128 defines configuration management as the unit's control of the initialization, change, and monitoring of resource configurations throughmixtures of processes to maintain the integrity of its resources. A ConfigurationItem (CI) is defined as an identifiable part of a system that is the target of a configuration control process. A CI can be either an information system component, say, a router, an application, a server, or a number of components (e.g., a number of routers with all the same operating system and configuration), or it can be a non-information system component, e.g., a document or firmware. o Each CI contains a set of attributes, e.g., the attributes describing the CI of a server can be the firmware version and the application installed by the server. If these two attributes are configured as separate CIs, they can be said to be "related". For example, if a Cisco router is considered a CI and the router operating system "IOS.XE16.1.1" is considered a separate CI, 'the two CIs are said to be "related". Configuration records need to be created for the set of attributes and relationships of the CI. Configuration records are stored in the configurationmanagement database CMDB. The main goal of configuration management is to manage the lifecycle of the CI. Inventorying CIs is an important step. The inventory process involves identifying all CIs and grabbing the configuration records from the configurationmanagement database. Another important concept in configuration management is the baseline configuration o A baseline configuration is a set of properties and CIs associated with a system that have been formally reviewed and approved. The baseline configuration can only be changed after the formal change process has been completed. Although configuration management is not limited to the information security domain, it is both an important part of security configuration management and an important part of achieving security and conducting risk assessments for each unit. As described in NISTSP 800-128, security-focused ConfigurationManagement (SecCM) should be built5.6 Configuration Management and Change Management 265on top of regular configuration management and include the following four main behaviors. Identify and document configurations that affect the security state of a resource. Consider security risks when approving initial configurations. Analyze the security risks involved in configuration changes. Documenting and approving changes. The process described by SecCM consists of the following four main phases.Planning phase: Develop SecCM rules and regulations and integrate them with the unit's IT and information security systems.Identifying andimplementing theconfiguration phase: Developing and establishing the security baseline configuration and implementing the CI's security baseline. Controlling theconfigurationchanges phase: Manage changes to secure the baseline configuration. Change management is explained further in the next section. The monitoring phase: Verifies and ensures that the CI complies with the unit's security management system and maintains the security of the baseline configuration.Planning Phase The planning phase consists of the following main tasks. Establishing a unit-wide SecCM plan.