|
A GUIDE TO UNDERSTANDING CONFIGURATION MANAGEMENT IN TRUSTED SYSTEMS
CONTENTS
FOREWORD i
ACKNOWLEDGEMENTS ii
CONTENTS iii
PREFACE v
1. PURPOSE 1
2. SCOPE 1
3. CONTROL OBJECTIVES 2
4. ORGANIZATION 3
5. OVERVIEW OF CONFIGURATION MANAGEMENT PRINCIPLES 4
5.1 PURPOSE OF CONFIGURATION MANAGEMENT 4
6. MEETING THE CRITERIA REQUIREMENTS 5
6.1 THE B2 CONFIGURATION MANAGEMENT REQUIREMENTS 5
6.2 THE B3 CONFIGURATION MANAGEMENT REQUIREMENTS 6
6.3 THE A1 CONFIGURATION MANAGEMENT REQUIREMENTS 6
7. FUNCTIONS OF CONFIGURATION MANAGEMENT 7
7.1 CONFIGURATION IDENTIFICATION 7
7.1.1 Configuration Items 8
7.2 CONFIGURATION CONTROL 10
7.3 CONFIGURATION STATUS ACCOUNTING 11
7.4 CONFIGURATION AUDIT 12
8. THE CONFIGURATION MANAGEMENT PLAN 14
9. IMPLEMENTATION METHODS 16
9.1 THE BASELINE CONCEPT 16
9.2 CONFIGURATION MANAGEMENT AT MER, INC 18
9.3 THE CONFIGURATION CONTROL BOARD 20
10. OTHER TOPICS 23
10.1 TRUSTED DISTRIBUTION 23
10.2 FUNCTIONAL TESTING 24
10.3 CONFIGURATION MANAGEMENT TRAINING 24
10.4 CONFIGURATION MANAGEMENT SUPERVISION 25
11. RATINGS MAINTENANCE PROGRAM 26
12. CONFIGURATION MANAGEMENT SUMMARY 27
APPENDIX A: AUTOMATED TOOLS 29
A.1 UNIX (1) SCCS 29
A.2 VAX DEC/CMS 30
GLOSSARY 32
REFERENCES 34
|