Understanding Baseline Management - PAS Integrity Software Suite - 7.3 - Administration & Configuration - Intergraph

Integrity Administration Guide

Language
English
Product
PAS Integrity Software Suite
Subproduct
Cyber
Search by Category
Administration & Configuration
PAS Version
7.3

It is nearly impossible to manage all changes to all products at all times. Managing the most important or most critical product or products is the basis of baselining.

A baseline is set of attributes or settings for one or more products. This set of attributes defines a standard that you can use to compare against and identify deviations or changes. A baseline may also need to change over time as agreed standards for product versions and attributes change. These changes can be captured and identified as significant versions of the baseline. This revision history of the baseline and the items within the baseline are a central component of baseline identification and management.

Baseline management helps you reduce or eliminate security gaps caused by products and assets that are not properly configured. These gaps can occur when baseline changes are not identified and documented, when required changes such as security patches are not applied, and when required configuration changes are not implemented on one or more assets. Security gaps provide vulnerabilities that can be exploited.

To mitigate these vulnerabilities, you need to periodically retrieve the configuration information of an asset and compare it to the baseline. If no changes have occurred, no action is required. If one or more changes have occurred, the changes must be assessed, verified, and either documented or rolled-back to the baseline configuration.

You can also use baselines to record important configuration settings during a highly productive time period. You can create and manage these productivity baselines to establish company standards and to assess and evaluate deviations from those standards.