💼 PR.IP-1: A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles (e.g. concept of least functionality)

• Contextual name: 💼 PR.IP-1: A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles (e.g. concept of least functionality)
• ID: /frameworks/nist-csf-v1.1/pr-ip/01
• Located in: 💼 Information Protection Processes and Procedures (PR.IP)

Description

Empty...

Similar

• Sections
  • /frameworks/iso-iec-27001-2013/12/01/02
  • /frameworks/iso-iec-27001-2013/12/05/01
  • /frameworks/iso-iec-27001-2013/12/06/02
  • /frameworks/iso-iec-27001-2013/14/02/02
  • /frameworks/iso-iec-27001-2013/14/02/03
  • /frameworks/iso-iec-27001-2013/14/02/04
  • /frameworks/nist-sp-800-53-r4/cm/02
  • /frameworks/nist-sp-800-53-r4/cm/03
  • /frameworks/nist-sp-800-53-r4/cm/04
  • /frameworks/nist-sp-800-53-r4/cm/05
  • /frameworks/nist-sp-800-53-r4/cm/06
  • /frameworks/nist-sp-800-53-r4/cm/07
  • /frameworks/nist-sp-800-53-r4/cm/09
  • /frameworks/nist-sp-800-53-r4/sa/10
• Internal
  • ID: dec-c-6ef9bea9

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 ISO/IEC 27001:2013 → 💼 A.12.1.2 Change management
💼 ISO/IEC 27001:2013 → 💼 A.12.5.1 Installation of software on operational systems		4	4
💼 ISO/IEC 27001:2013 → 💼 A.12.6.2 Restrictions on software installation
💼 ISO/IEC 27001:2013 → 💼 A.14.2.2 System change control procedures
💼 ISO/IEC 27001:2013 → 💼 A.14.2.3 Technical review of applications after operating platform changes
💼 ISO/IEC 27001:2013 → 💼 A.14.2.4 Restrictions on changes to software packages
💼 NIST SP 800-53 Revision 4 → 💼 CM-2 BASELINE CONFIGURATION	7	1	1
💼 NIST SP 800-53 Revision 4 → 💼 CM-3 CONFIGURATION CHANGE CONTROL	6
💼 NIST SP 800-53 Revision 4 → 💼 CM-4 SECURITY IMPACT ANALYSIS	2
💼 NIST SP 800-53 Revision 4 → 💼 CM-5 ACCESS RESTRICTIONS FOR CHANGE	7
💼 NIST SP 800-53 Revision 4 → 💼 CM-6 CONFIGURATION SETTINGS	4	1	1
💼 NIST SP 800-53 Revision 4 → 💼 CM-7 LEAST FUNCTIONALITY	5	4	5
💼 NIST SP 800-53 Revision 4 → 💼 CM-9 CONFIGURATION MANAGEMENT PLAN	1
💼 NIST SP 800-53 Revision 4 → 💼 SA-10 DEVELOPER CONFIGURATION MANAGEMENT	6

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags

Policies (13)

Policy	Logic Count	Flags
📝 AWS Account IAM Access Analyzer is not enabled for all regions 🟢	1	🟢 x6
📝 AWS EC2 Security Group allows public IPv4 (0.0.0.0/0) access to admin ports 🟢	1	🟢 x6
📝 AWS EC2 Security Group allows public IPv6 (::/0) access to admin ports 🟢	1	🟢 x6
📝 AWS RDS Instance Auto Minor Version Upgrade is not enabled 🟠🟢	1	🟠 x1, 🟢 x6
📝 AWS S3 Bucket is not configured to block public access 🟢	1	🟢 x6
📝 AWS S3 Bucket Policy is not set to deny HTTP requests 🟢	1	🟢 x6
📝 AWS S3 Bucket Versioning is not enabled 🟢	1	🟢 x6
📝 Azure App Service does not run the latest Java version 🟢		🟢 x3
📝 Azure App Service does not run the latest PHP version 🟢		🟢 x3
📝 Azure App Service does not run the latest Python version 🟢		🟢 x3
📝 Azure Cosmos DB Account Virtual Network Filter is not enabled 🟢	1	🟢 x6
📝 Azure Network Security Group allows public access to RDP port 🟢	1	🟢 x6
📝 Azure Network Security Group allows public access to SSH port 🟢	1	🟢 x6

Internal Rules

Rule	Policies	Flags
✉️ dec-x-4c15a09f	2
✉️ dec-x-ab7fc52e	1