What is Configuration management CM?

Understanding Configuration management CM

A formal, methodical, comprehensive process for establishing a baseline of the IT environment and each of the assets within that environment. Configuration management involves identifying, documenting, controlling, and tracking all hardware, software, and network components, including their versions, settings, and relationships. CM ensures systems maintain their expected state, security controls remain effective, and changes are properly managed. CM is required by standards like ISO 27001, NIST SP 800-53, ITIL, and various compliance frameworks. Organizations implement CM through baselines, configuration items, version control, automated monitoring, and change management processes. For example, a cloud service provider might implement an automated configuration management system that continuously monitors and enforces security configurations across thousands of servers, alerting on or automatically remediating unauthorized changes. Related terms: Change management, Baseline configuration, Version control, IT asset management, Configuration item, Security hardening, Drift detection.