configuration parameter

An adjustable setting — a named, changeable value — within hardware, software, or firmware that controls how a system component behaves and, by doing so, affects the component's security posture or operational functionality. NIST SP 800-128 and CNSSI 4009-2015 define the aggregate of such settings as "the set of parameters that can be changed in hardware, software, and/or firmware that affect the security posture and/or functionality of the information system." Individual configuration parameters span a wide range — those that affect security state include registry settings, account and file permission settings, and settings for functions, ports, protocols, and remote connections — and are managed collectively through security-focused configuration management to establish and enforce secure baselines across mainframe computers, servers, workstations, network components such as firewalls and routers, operating systems, middleware, and applications. In compliance and audit practice, specifying, documenting, and controlling configuration parameters is treated as a discrete security requirement: documentation must capture all network device addressing and "all other configuration param

Advisory only. A term this product ships is defined by an authority document, not by a search result.