Security News > 2021 > October > Policy automation to eliminate configuration errors

On the surface, it might seem like configuration errors should be an easily solvable problem: organizations should simply pay more attention to any changes and manually make sure all settings are correct every time a change is made.

To successfully control how every update, change and addition is implemented - and to understand how each change affects the environment and other changes that are already "In flight" - the only solution is to embrace automation.

The key to accomplishing more tasks than what seems possible is to fully embrace automation when it comes to configuration and changes.

Automatic change analysis and design: There is no such thing as a simple configuration change.

Will making the change live potentially cause a problem? Is there another element of your environment that will need to be tweaked to support the change? Automation can answer these questions and automatically approve or deny a request or flag a change as needing direct review and adjustment to maintain compliance.

A comprehensive audit trail should include the device or platform whose configuration was changed, the exact time of the change, the configuration details, the people who were involved, and the change context such as the project or application.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/HIX02py_ekI/