Definition
Configuration management is the process of establishing and maintaining consistency of a product's performance, functional, and physical attributes with its requirements, design, and operational information throughout its life. It involves identifying, controlling, and tracking all configuration items (CIs) within a system, including hardware, software, documentation, and processes. This systematic approach ensures that changes are made in a controlled manner, preventing unintended consequences and maintaining system integrity. In practice, this means having a baseline configuration for all systems and rigorously documenting and approving any deviations or updates. Configuration management is crucial for security, as it helps prevent unauthorized modifications and ensures systems are patched and updated consistently. For example, a server's operating system version, installed software, and network settings would all be tracked as configuration items. This differs from patch management, which focuses solely on applying software updates, whereas configuration management encompasses the entire system state. Understanding configuration management is vital for cybersecurity certifications like Security+ and CISSP, as well as for ITIL and DevOps practices.