SAMMY UI is optimized for resolutions with a width 1024px and higher.
NIST SSDF
Browse NIST SSDF
PW.9.1: Configuration Hardening
PW.9.2: Hardening Baselines
Hardening Baselines
PW.9.2: Implement the default settings (or groups of default settings, if applicable), and document each setting for software administrators.
  • Example 1: Verify that the approved configuration is in place for the software.
  • Example 2: Document each setting’s purpose, options, default value, security relevance, potential operational impact, and relationships with other settings.
  • Example 3: Use authoritative programmatic technical mechanisms to record how each setting can be implemented and assessed by software administrators.
  • Example 4: Store the default configuration in a usable format and follow change control practices for modifying it (e.g., configuration-as-code).
CMMI Maturity
Not Applicable - Not applicable
Level 1: Initial - Unpredictable and reactive. Work gets completed but is often delayed and over budget.
Level 2: Managed - Managed on the project level. Projects are planned, performed, measured, and controlled.
Level 3: Defined - Proactive, rather than reactive. Organization-wide standards provide guidance across projects, programs, and portfolios.
Level 4: Quantitatively Managed - Measured and controlled. Organization is data-driven with quantitative performance improvement objectives that are predictable and align to meet the needs of internal and external stakeholders.
Level 5: Optimized - Stable and flexible. Organization is focused on continuous improvement and is built to pivot and respond to opportunity and change. The organization’s stability provides a platform for agility and innovation.
Description

Implement the default settings (or groups of default settings, if applicable), and document each setting for software administrators.