What is Baseline Configuration Management (BCM)? The devices comprising an IT or OT environment store all kinds of configuration information, from functional settings to software versions to various other records and files. Most companies devise a configuration policy which defines how assets or devices should be configured and how configuration changes should occur. However, in many cases, the companies do not have the tools needed to confirm that devices are conforming to the policy.
This is where BCM comes in. The baseline configuration is a snapshot of the configuration settings at a specific point in time. The configuration settings defined as the “most secure” state of an asset can then be used as a baseline for comparison. Baseline Configuration Management involves periodically retrieving the configuration of the asset and comparing it to the baseline.
Not managing the baseline represents a significant risk to the business. The best way to understand the importance of BCM is to recognize that any device that does not have the proper configuration has a security vulnerability that can be exploited.
Unfortunately, many companies perform BCM as a manual activity, meaning that it is expensive, time-consuming, and prone to errors. At TDi Technologies, we solve this challenge with a device and platform agnostic approach to BCM that considerably simplifies the work involved. The ConsoleWorks solution completely automates this process, from retrieving the configuration, comparing against the baseline, alerting on changes, to identifying where changes have occurred.