Which control practice relates to establishing and maintaining baselines for internally developed systems?

Which control practice relates to establishing and maintaining baselines for internally developed systems?

• A. Release management
• B. Configuration management
• C. Change management
• D. Asset management

Answer: (B)

The choice of configuration management as the correct answer is apt because this practice specifically focuses on establishing and maintaining baselines for systems, particularly those that are developed internally. Configuration management is crucial for ensuring that the integrity and functionality of the systems are safeguarded through systematic control. By maintaining a baseline, organizations can keep track of the standard configuration of their systems, which includes not only the hardware and software components but also their interactions and dependencies. This enables the organization to monitor changes, assess their impacts, and ensure that systems remain compliant with required specifications and security controls. When configuration management practices are properly implemented, they help in effectively managing changes to systems and mitigating risks associated with unauthorized modifications or deviations from established baselines. This alignment to baseline standards facilitates easier troubleshooting and audits, ensuring consistent operational performance and security. In the context of the other options, release management focuses on planning, scheduling, and controlling the build and delivery of software and updates, rather than maintaining the baselines. Change management addresses the process of managing changes to minimize the impact on services, without necessarily focusing on the continual maintenance of established baselines. Asset management deals with the tracking and management of an organization’s assets throughout their lifecycle but does not specifically encompass the establishment and maintenance of system baselines.

The choice of configuration management as the correct answer is apt because this practice specifically focuses on establishing and maintaining baselines for systems, particularly those that are developed internally. Configuration management is crucial for ensuring that the integrity and functionality of the systems are safeguarded through systematic control.

By maintaining a baseline, organizations can keep track of the standard configuration of their systems, which includes not only the hardware and software components but also their interactions and dependencies. This enables the organization to monitor changes, assess their impacts, and ensure that systems remain compliant with required specifications and security controls.

When configuration management practices are properly implemented, they help in effectively managing changes to systems and mitigating risks associated with unauthorized modifications or deviations from established baselines. This alignment to baseline standards facilitates easier troubleshooting and audits, ensuring consistent operational performance and security.

In the context of the other options, release management focuses on planning, scheduling, and controlling the build and delivery of software and updates, rather than maintaining the baselines. Change management addresses the process of managing changes to minimize the impact on services, without necessarily focusing on the continual maintenance of established baselines. Asset management deals with the tracking and management of an organization’s assets throughout their lifecycle but does not specifically encompass the establishment and maintenance of system baselines.