Definition
Secure Configuration is the process of preparing systems, devices and services according to defined security requirements by limiting unnecessary functions and selecting appropriate settings.
Human Explanation
Security should be considered during configuration so that a system is as resistant as practical to errors, misuse and attempts to compromise it.
Why it Matters
Default settings often do not provide a level of security appropriate for an organisational environment.
Conceptual Boundary
Secure Configuration is not a one-time activity performed during installation. It should be maintained and regularly verified throughout the operating life of the system.
Practical Perspective
Security is easiest to maintain when a system has been configured correctly against applicable standards from the beginning.