Cyber Thursday: CMMC: Control Set Series: 3.4 Configuration Management

This presentation explains the purpose behind these requirements: knowing what you have, controlling how it changes, and reducing your attack surface. Attendees will gain a clear understanding of what assessors expect to see, the documentation needed to demonstrate compliance, and the practical evidence required to satisfy each requirement.  That includes baseline configurations, change control records, access restrictions, and software management policies.

Speaker: Matt Frost, Government Contract Specialist, Wisconsin Procurement Institute – WI APEX Accelerator