Skip to main content

💼 8.9 Configuration management

  • ID: /frameworks/iso-iec-27001-2022/08/09

Stats​

not available

Description​

Configurations, including security configurations, of hardware, software, services and networks shall be established, documented, implemented, monitored and reviewed.

Similar​

  • Internal
    • ID: dec-c-80a2af3b

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (17)​

PolicyLogic CountFlagsCompliance
🛡️ Google Cloud DNS Managed Zone DNSSEC is not enabled🟢1🟢 x6no data
🛡️ Google Cloud DNS Managed Zone DNSSEC Key-Signing Algorithm is RSASHA1🟢1🟢 x6no data
🛡️ Google Cloud DNS Managed Zone DNSSEC Zone-Signing Algorithm is RSASHA1🟢1🟢 x6no data
🛡️ Google Cloud SQL Instance SSL Connections are not enforced🟢1🟢 x6no data
🛡️ Google Cloud SQL Server Instance 3625 (trace flag) Database Flag is not set to on🟢1🟢 x6no data
🛡️ Google Cloud SQL Server Instance remote access Database Flag is not set to off🟢1🟢 x6no data
🛡️ Google Cloud SQL Server Instance user connections Database Flag is set to a limiting (other than 0) value🟢1🟢 x6no data
🛡️ Google Cloud SQL Server Instance user options Database Flag is configured🟢1🟢 x6no data
🛡️ Google GCE Instance Enable Connecting to Serial Ports is not disabled🟢1🟢 x6no data
🛡️ Google GCE Instance is configured to use the Default Service Account🟢1🟢 x6no data
🛡️ Google GCE Instance is configured to use the Default Service Account with full access to all Cloud APIs🟢1🟢 x6no data
🛡️ Google Project has a default network🟢1🟢 x6no data
🛡️ Google Project has a legacy network🟢1🟢 x6no data
🛡️ Google Storage Bucket is anonymously or publicly accessible🟢1🟢 x6no data
🛡️ Oracle IAM Auth Tokens are not rotated every 90 days🟢1🟢 x6no data
🛡️ Oracle IAM Customer Secret Keys are not rotated every 90 days🟢1🟢 x6no data
🛡️ Oracle IAM Domain Password Policy has weak complexity requirements🟢1🟢 x6no data

Internal Rules​

RulePoliciesFlags
✉️ dec-x-2e85e7c51
✉️ dec-x-2e229fb41
✉️ dec-x-30d6f14d1
✉️ dec-x-087d4ffc1
✉️ dec-x-af1de99b1
✉️ dec-x-d75986a31