The Microsoft Windows Server 2003 Assessment Configuration Pack for Federal Information Security Management Act was developed in conjunction with Brabeion Software, and contains suggested system configurations that map best practices and standards to the requirements of the Federal Information Security Management Act. This configuration pack defines recommended configurations based on a number of settings-based configuration items, and assesses your system against the desired configuration.
Once imported into SCCM 2007, this configuration pack and its included configuration items can be targeted to collections of systems which are then audited for compliance with the recommended configurations. When settings are detected to be out of compliance, events will be generated and sent to the Configuration Manager server where the data is available for reporting.
Please note that the configuration items, settings, and values included in this configuration pack do not necessarily represent every configuration required for Federal Information Security Management Act compliance. The administrator should verify that the rules being evaluated meet the unique requirements for their specific environment. If desired, the administrator can also modify the configuration pack by adding, modifying, and deleting configuration items, settings, and values through the Desired Configuration Management user interface within the SCCM 2007 console.
Feature Bullet Summary:
The Microsoft Windows Server 2003 Assessment Configuration Pack for Federal Information Security Management Act (FISMA) includes configuration items for the following:
• Member Server
• Domain Controllers
To understand in detail what each configuration item will be evaluating please review the properties of that configuration item in the context of the server role being addressed.
Configuration Pack Release History:
11/12/2007 - Version 1.0 - Original release of the English version