
Procedures shall be maintained which detail the specific server security configuration standards necessary to protect each system. This document specifies the configuration requirements for a baseline security configuration for servers. Approved server configuration guides must be established and maintained by each operational group, based on business needs and approved by infosec. This policy demonstrates what the enterprise servers are and how they are to be managed and updated. This section describes how to configure policy server infrastructure and policy objects to define security policies for web application . ...