Source: [LinkedIn](https://www.linkedin.com/pulse/do-you-have-effective-configuration-management-process-blokdyk/)  
Author: [Gerardus Blokdyk](https://www.linkedin.com/in/gerardblokdijk/)  
Publication date: February 21, 2022  
Retrieved on April 14, 2022

Relevant ISO 27001 clauses/controls:
- [a-8.9-Configuration-management](../../Standards/ISO27x/OST/27002/EN/a-8.9-Configuration-management.md)
- [[ISO 27001 C 9.2 Internal audit]]
- [ISO 27001 A 18 Compliance](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2018%20Compliance.md)

# Configuration Management: Ask This;

1. How does software configuration management facilitate the changes that occur during various stages of a system development life cycle in your organization?

2. What Enterprise Content Management processes and supporting software tools does your organization use?

3. To what degree have information system configuration management policies and procedures been defined and implemented across your organization?

4. Does your organization have a documented effective configuration management and change management process defined?

5. Do you have an effective configuration management process in place for system software?

6. Are change control/ configuration management procedures followed for all software and hardware modifications of systems that process and store sensitive information?

7. Does your organization have formalized processes for IT support services, problem management, change management and configuration management?

8. For major system acquisitions and major projects, does the project office include a configuration management plan as a component of the project management plan?

9. Is a configuration management process in place that controls access to all software code and hardware components throughout the system lifecycle?

10. How much visibility does a client have into your internal processes, including Software Quality Assurance (SQA) activities, configuration management and testing?

11. Which software configuration management system (SCM) does your organization currently use?

12. Does your Incident and Change management integrate with a Configuration Management System (and CMDBs) to support and maintain the relationship of Release Records to associated CI Records?

13. How does your organization integrate hardware configuration management into your software compliance environments?

14. Are configuration management software tools used to control and track change activity throughout the software process?

15. Does your SDLC process have a tool that integrates with a Configuration Management System (and CMDBs) to gather, validate and graphically illustrate required information for release builds and deployment activities?

16. Does your organization have a formal, documented process for configuration management of your products?

17. Does the knowledge management tool and its data repositories form part of, or link to the configuration management system?

18. Are system developers required to perform configuration management, including change control and weakness management during system design, development, and implementation?

19. Are system developers/integrators required to implement and document a configuration management process that tracks security flaws?

20. Does the system developer create and implement configuration management plans that control changes to system during development?

21. How does your current endpoint security or configuration management software vendor support Network Access Control?

22. What configuration management system for change control of production programs is in use?

23. With regards to the Configuration Items (CIs) referred to within the Configuration Management Database (CMDB), who has financial control over which items?

24. Does the configuration management process track the number of changes to the software baseline(s)?

25. Which service desk software is currently used by your organization, and how is it integrated with the deployment of configuration management?

26. Do your suppliers have a configuration management process which controls and releases engineering specifications, part numbers, BOMs and other product documentation?

27. Is there a closed loop identification and resolution system for hardware and software configuration management problems?

28. How does software change and configuration management keep pace with your organizations application and infrastructure portfolios?

29. To what degree does the configuration management process integrate with the change management process and its associated tools?

30. Does the configuration management system require two authenticated users to process a change?

31. Does your suppliers have an established, documented and maintained configuration management process appropriate to each product type?

32. To what extent does the configuration management process encompass changes to key interfaces and their standards?

33. Which activities does service asset and configuration management ensure are performed on configuration items (CIs)?

34. How important is the Software Configuration Management system for your Agile environment?

35. Is there a configuration management library system as a repository for the software baselines?

36. Which configuration management system processes keeps track of the changes so that the latest acceptable configuration specifications are readily available?

37. What technologies are in place to automate and keep up with the latest patches, system vulnerabilities, configuration management and compliance monitoring?

38. Are project personnel trained to perform the software configuration management activities for which they are responsible?

39. Do you have an IT Service Management team or a Configuration Management Database (CMDB) manager?

40. Is the configuration management process integrated with each project plan and an integral part of the culture?

41. What information does Configuration Management provide to the IT management of your organization?

42. Do contractors employ a validated configuration management process to manage changes on your organizations projects?

43. Do teams have sufficient development infrastructure and tools to follow state of the art configuration management and testing practices?

44. Does your organization have configuration management solutions that increase productivity through intelligent automation?

45. Is application code managed in a secure configuration management system with access controls?

46. Does the configuration management process integrate with incident, problem and change management processes?

47. Are your version control and configuration management policies and procedures the same throughout your entire organization and for all your products?

48. Are all versions of all parts of your systems managed by a configuration management system?

  

## Organized by Key Themes: MANAGEMENT, SOFTWARE, SYSTEMS, NETWORK, SECURITY, DEVELOPMENT, DESIGN, CHANGE, DATA, PROJECT:

  

### MANAGEMENT:

  

Have test requirements for acceptance and integration testing and configuration management been developed?

Make headway so that your company is employing modern day software and hardware solutions to ensure system reliability, redundancy, sustainability, security compliance, and (internal) customer satisfaction; utilizing system engineering methods and standards such as traceability, system verification, system validation, baseline descriptions, configuration management and change control to develop first time quality system that is operable and maintainable. 

  

Do you have a comprehensive data management plan that defines goals and policies for the collection, structure, and management of data assets?

Liaison so that your company defines and allocates Configuration and Data Management requirements for product hardware, software and engineering design data systems throughout the product lifecycle. 

  

Are changes to the scope of functionality and/or work that may have an impact on the direction of the system appropriately managed?

Check that your design reviews released engineering change data and changes documenting activities to ensure adherence to configuration management procedures and policies. 

  

Does your SDLC process have a tool that integrates with a Configuration Management System (and CMDBs) to gather, validate and graphically illustrate required information for release builds and deployment activities?

Secure that your staff maintains the Software Configuration Management System including collection or distribution of code documentation, problem report and change request processing, software build documents, and delivery of software products to operational environments. 

  

How do you reuse assets to assist in reengineering?

Ensure you have system engineering involvement including large project requirements management, project management, cost effort estimation, build versus buy analysis, asset management reuse, configuration management, subcontractor management and complex solution design architecture. 

  

Do you have a plan/process for dealing with variances between cost performance and the baseline?

Safeguard that your operation ensures Service Asset and Configuration Management (SACM) processes and Configuration Management Database (CMDB) effectiveness, facilitates change management process and tool design, and drives the identification of Critical Success Factors and KPIs to measure ITSM improvement. 

  

Has a managed and controlled process database been established for process metrics data across all projects?

Make sure your design establishes service asset and configuration management processes and tools to input CIs, maintains CMDB to established quality standards, implements automation and discovery tools to ensure CI/CMDB quality. 

  

What are the rules defining how that components access control list should be configured?

Support configuration management of version control systems for code management, test plan and pipeline development from Jira, user acceptance testing, review and prioritization of defect backlog for allocation to releases and sprints, requirements elicitation and validation sessions, development and refinement of requirements, release planning activities and schedule from a requirements perspective, and sprint planning and execution from a requirements perspective. 

  

Have all mechanisms that can lead to temporary or permanent changes to facility configuration been identified?

Guarantee your process conducts change control and device configuration management activities on all IAM technologies, including inspection or reviews of peers changes, as well as implementation of changes and support of changes related to the IAM Platform. 

  

Does the deployment use the incident management system for reporting issues and problems?

Establish that your team oversees Claims Operations and Configuration Information Management and works collaboratively with Corporate business owners to ensure the health plan processes for claims and encounters, aligns with regulatory requirements for each applicable line of business. 

  

### SOFTWARE:

  

Does the automated system create and maintain a system record of rejected guarantee requests?

Invest in development, execution and oversight of software and hardware asset and configuration management processes aligned with ITIL best practices required to support the needs of the organization and ensure process compliance by responsible teams to maintain data quality. 

  

Are standard reports documenting configuration management activities and the contents of the baselines developed and made available to affected groups and individuals?

Liaison so that your team products include software plans (Software Development Plan, Configuration Management Plan, Verification and Validation Plan); requirements specification; design documents, source code; test plans, procedures, cases, and reports; physical configuration audits and functional configuration audits. 

  

How do you do maintenance on released versions without interfering with your current development work?

Collaborate with Cross-Functional Teams to design, build, implement, and maintain deployment automation for various applications from code check-in to production Software Configuration Management Support with Branching and Merging strategies, Version Control Systems, Integration Management, Build/Release Management and Requirement Management. 

  

Is the testing done with the team, independent of the development organization, verifying expected results?

Be confident that your workforce is setting up and managing the operation of project development and test environments as well as the software configuration management processes for the entire application development lifecycle. 

  

Has the use of commercially available products and other products in every system development process been reviewed from a technical perspective with involvement by experts?

Certify your team is involved in modern software development processes, including software configuration management tools, defect tracking tools, peer review, and agile development life cycles. 

  

Which lifecycle stage ensures that the impact of service outages is minimized on a day to day basis?

Make sure your staff ensures compliance with Configuration Management Standards, Software development Standards and Procedures and the Software Development Life Cycle Process. 

  

Which instructional support features should be included in a simulator or embedded training application?

Be confident that your design provides Configuration Management (CM) support for the (internal) customers software baseline control efforts. 

  

What are the providers procedures for configuration management, patch installation and change management for all servers and PCs involved in delivery of contracted services?

Ensure your team is involved in software configuration management and streaming strategies for large parallel development teams. 

  

Is there a defined and documented process for collecting, recording, processing, maintaining, and reporting configuration data necessary for the program?

Maintain best practices of software configuration management by working in docker containers using git version control and maintaining frequent communication with team members. 

  

### SYSTEMS:

  

What processes and standards do you follow for incident management, problem management, change management, and configuration management?

Oversee that your process develops, implements, and maintains a series of IT processes to ensure the integrity and availability of information resources by overseeing the development and implementation of configuration management and systems quality assurance. 

  

Is the allocation of responsibilities for configuration management and monitoring of performance defined?

Liaison so that your process is involved in operating systems life cycle management and configuration management for example Print Management, Account Management, System Imaging, Hardware Modernization, Performance Monitoring. 

  

Is there a process in place to ensure that the project plan is updated as changes occur?

Be sure your process provides configuration management support in accordance with compliance and policies and procedures, using configuration management systems to record, track, monitor, and update component configurations and configuration items and changes and account for assets. 

  

How do you identify effective change management processes?

Recommend and implement process and tool improvements to improve the efficiency and effectiveness of your organizations change management and configuration management processes and systems. 

  

What strategies and best practices promote agile and effective configuration management?

Make headway so that your workforce is involved in closed loop corrective action systems, nonconforming material control system and configuration management practices. 

  

Does your Incident and Change management integrate with a Configuration Management System (and CMDBs) to support and maintain the relationship of Release Records to associated CI Records?

Oversee that your process helps implement and support a new configuration management system for a simplified orchestration workflow focused on applications, while phasing out legacy configuration management systems. 

  

How should companies evaluate existing and emerging technology to maximize server returns?

Secure that your group maintains professional and technical knowledge by tracking emerging trends in systems engineering, configuration management and enterprise technology. 

  

Does formal monitoring of security logs take place to identify and address potential intrusions or inappropriate use of data assets?

Oversee and participate in design, implementation, administration and support of platform systems, including Windows, Linux, AIX, Active Directory, Exchange, Group Policy, identity and access management products, monitoring products, configuration management products and applications. 

  

Is there a procedure for maintaining traceability between requirements, design, code, and tests as requirements are added or modified?

Make sure your workforce follows processes for maintaining infrastructure configuration management across enterprise IT systems. 

  

Does the automated system provide an automated interface with the core financial system to record the outlay of subsidy from the program account?

Secure that your strategy is supporting systems in the maintenance phase including configuration management and optimizing existing code. 

  

### NETWORK:

  

Does your support center participate in most IT processes and has that participation been formally defined?

Assure your organization is involved in assessment and implementation of policy-driven change and configuration management to support Network Virtualization, Network Function Virtualization (NFV) and Software Define Networking (SDN) adoption. 

  

What are your reasons for implementation of the selected models, approaches, or standards?

Assure your workforce is maintaining configuration management in the implementation of software upgrades, network services, equipment and devices. 

  

Is the test and analysis data available and are the variances to the test results identified and updated?

Make sure your strategy conducts advanced and state-of-the-art assignments such as network design optimization, technical trade studies, specification of equipment configurations, technology assessment, technology insertion planning, capacity planning, and configuration management. 

  

What technologies are in place to automate and keep up with the latest patches, system vulnerabilities, configuration management and compliance monitoring?

Assure your workforce is responsible for infrastructure components and configurations, including servers, directory services, configuration management, monitoring, and networking configuration. 

  

How do you consolidate your monitoring tools into a single management system?

Work with network architect to recommend and implement improvements to overall performance and reliability, including installing, upgrading/patching, monitoring, problem resolution, automation, and configuration management. 

  

Do you track every configuration change made to routers and switches in your network and who made them?

Make headway so that your team has knowledge and involvement using and installing networking equipment as switches, routers and firewalls. 

  

Will contractor innovation and technology insertion be incentivized through delegation of increased responsibilities as configuration management?

Be sure your team is responsible for troubleshooting network and platform issues from a server side perspective. 

  

Have you considered project management activities as planning, meetings, and managing people?

Interact frequently with network an transport services providers to resolve network anomalies and performance issues, as well as to determine future products to meet the (internal) customers strategic initiatives for services. 

  

How do you fix the program in the best possible way?

Provide expertise, support and direction on corporate network issues including active directory, DNS, DHCP, virus prevention, backup issues, email concerns and general network permission structure. 

  

Are the documented processes available and effectively disseminated to all Organization personnel?

Evaluate network designs to determine if requirements are met efficiently and effectively. 

  

### SECURITY:

  

Does the automated system provide an automated interface with the core financial system to initiate and record disbursements for interest supplement payments?

Interface so that your operation is involved in monitoring and managing Cloud security operations, including identity and access control, secure configuration management, network security, enforcement policy scripting, workload security, data security, and logging, or public key infrastructure (PKI) management and data encryption for data-at-rest and data-in-transit. 

  

Have organizations consisting of customers, development teams, and partners been established and held?

Maintain system baselines and configuration management items, including security event monitoring policies in a manner determined and agreed to by the (internal) customer TM, ensuring that changes are made using the established approval process. 

  

Does the configuration manager have a complete record of all the changes made and the current configuration of the test environment?

Develop experience working in Cybersecurity engagements with one or more multiple domains including (Cloud, Workforce Management, Risk Management, Industrial Control Systems, Asset Management, Configuration Management Data Loss Prevention, Supply Chain Management, and Change Management). 

  

How do you keep track of all versions, dependencies among components, approval records, etc. etc. etc.?

Be confident that your design develops core documents such as System Security Plan, Contingency Plan, Incident Response Plan, Standard Operating Procedures, Plan of Actions and Milestones, Remediation Plans, Configuration Management Plan, etc. 

  

Is configuration management provided for test databases, data files, and external programs?

Provide assistance and guidance in drafting and reviewing Configuration Management Plans, System Security Plans, Incident Response Plans, Contingency Plans, Disaster Recovery Plans, Continuity of Operations, Information Assurance Vulnerability Management Plans, Network Diagrams/Topology, Physical Security Plans, Personnel Security Policy and Training Plans. 

  

Is there a procedure for delivering the product to the configuration management organization?

Certify your design is involved in incident handling response, endpoint security capabilities, security monitoring capabilities, Secure Configuration Management (SCM), Assured Compliance Assessment Solution, Continuous Monitoring and Risk Scoring. 

  

Have the unresolved problem reports and change requests been reviewed for trend information?

Lead the development and maintenance of security documentation such as the System Security Plan, Privacy Impact Assessment, Configuration Management Plan, Contingency Plan, Contingency Plan Test Report, POA and M, annual FISMA assessment, and incident reports. 

  

Does the system have any intrusion detection or real time monitoring software installed?

Make sure the security architecture work includes all areas of Information Security such as IAM Authentication/access management, threat management, incident response, forensics, logging, monitoring, application security, data protection, vulnerability management, and configuration management in relation to multiple Cloud Service Providers. 

  

How do you track what changes were made to the application?

Make sure the ISSO is responsible for the configuration management (CM) for information system security software, hardware, and firmware and manages changes to system and assesses the security impact of those changes. 

  

How can one avoid the common approach to design records of capturing any and all data that may be considered relevant?

Make sure the SDLC security engineering requirements consists of, but may not be limited to activities related to threat modeling, risk identification, security/controls requirements, design, development, integration, testing, deployment, operations and maintenance (O and M), vulnerability management, remediation, configuration management (CM) and risk management for both traditional and agile environments. 

  

### DEVELOPMENT:

  

Is the configuration management plan clear about who needs to approve changes to any baseline?

Confirm that your design is working with cloud providers, development operations tools, configuration management, and cloud system architecture (load-balancing, auto-scaling, security groups, secrets management and key management). 

  

Who on your staff understands the entry and exit criteria for each task the contractor has defined?

Safeguard that your process understands software development process and experienced in IT project management methodologies (Agile, Waterfall, hybrid) and IT solution delivery processes, procedures, and toolsets (DevOps, configuration management). 

  

How are configuration baselines and configuration checks integrated into the policies, configuration management process, and software management process?

Make sure the DevSecOps Configuration Manager leads and supports day-to-day configuration management operations for program related configuration items to include documentation, reports, system configurations, and software development/deployed baselines. 

  

Does the automated system provide an automated interface with the core financial system to record the collection?

Provide software process management and configuration management throughout the software development life cycle. 

  

To what degree does the configuration management process integrate with the change management process and its associated tools?

Enforce organization policies in the areas of development methodology, architecture, security, change and configuration management and compliance. 

  

How do you automate the steps involved without implementing so many additional tools that the solution becomes part of the problem?

Liaison so that your team is involved in configuration management and/or quality assurance in automotive product development. 

  

Has the service been built and tested to ensure that it meets the capacity requirements?

Develop experience working with application development tools and practices, such as version control, defect tracking, build management, test management and other activities related to configuration management. 

  

Are errors and mistakes documented and used to modify upcoming changes or the overall process?

Make improvements in the methodologies used for configuration management and development of software that helps to find ways to use in configuration management. 

  

Is the configuration control board active and responsible in evaluating and approving changes?

Be certain that your personnel is responsible for software configuration management (SCM) of developmental and operational systems. 

  

Which role would you MOST expect to be involved in the management of Underpinning Contracts?

Warrant that your personnel is involved in agile development, configuration management and continuous integration processes and methodologies. 

  

### DESIGN:

  

How do you determine the requirements and justification for configuration management when all the benefits come from improvements to the other processes?

Ensure your company ensures compliance with quality and regulatory requirements by applying design control processes as risk management, configuration management, requirements management and verification testing. 

  

Are there procedures for ensuring that developmental prototypes are developed in accordance with standard software development practices?

Guarantee your process is designing technical architecture and Develop cost-effective solutions using various configuration management tools to make infrastructure compliant with the companies cloud policies along with ensuring high availability. 

  

How do you keep track of all corresponding versions, dependencies among components, approval records, etc. etc. etc., and still assure quality?

Contribute towards creation of software design history file, risk management documentation, issue tracking, configuration management, etc. 

  

Can the service be deployed in a manner that meets organizational security standards and requirements?

Design and implement short and long term strategic plans to meet current and future requirements around engineering and operations of Infrastructure Configuration Management (currently with Puppet and Ansible). 

  

Do the service designers understand the standards and tools used for releasing and deploying services?

Assure your team is designing and developing automation solutions for deploying and managing Micro services and web applications on cloud resources with configuration management and Continuous Delivery. 

  

What are the strategies, processes and best practices that enable effective software configuration management?

Ensure the integration of safety, reliability, operability, constructability, and configuration management practices into final products/designs/processes. 

  

Does your support center participate in most IT processes and has that participation been formally defined?

Provide guidance on, and participate in software development activities including design and code reviews, requirements analysis and tracing, defect tracking and configuration management. 

  

Does your organization ensure that invoices are generated promptly and that efficient mechanisms are in place to collect and record payments and to provide support for loan servicing?

Provide support related to all aspects of software analysis, design, development, documentation, and configuration management. 

  

Are changes requested by the business side of your organization able to be accommodated?

Make sure your strategy approaches code design and implementation with a security lens and actively looks for vulnerabilities both in the code and when providing code reviews. 

  

What is your current comfort level with automated approval versus software centric automation?

Make sure your strategy documents include detailed specifications, implementation guides, architecture diagrams or design documents. 

  

### CHANGE:

  

How do you trace changes on a machine back to the decision process that caused it?

Make sure your workforce is involved in Risk Process, Engineering Requirements documentation, Request For Change Documentation, Configuration Management Programs. 

  

How do you put all of your changes in a configuration management system?

Define, implement, and improve operational models; including 24x7 Operations and On-Call, Event Management, Incident Management, Problem/Escalation Management, Configuration Management and Change Management Processes. 

  

How do you effectively gain control of the configuration changes to know what is really happening to your contact center systems?

Analyze and coordinate proposed changes of product design and quality system processes to determine effect on overall product and system, coordinating with change owners, providing feedback. 

  

How do you do maintenance on released versions without interfering with your current development work?

Make headway so that your strategy is responsible for leading the enterprise change control business process and the release technician group. 

  

Which supporting design techniques do you adopt to enable configuration management practices?

Check that your design has involvement leading Change through process re engineering and valuation/implementation of best practices and leading technologies. 

  

Are manufacturing, inspection, manufacturing planning, and procurement notified of an initial release or an approved change?

Establish that your staff supports the change process so that only approved and validated changes are released to manufacturing. 

  

What types of changes to the information system or operating environment should be documented?

Identify and champion organizational and process changes that support automated cloud provisioning; invest in the creation and maintenance of standard cloud computing policies, operating procedures, and overall documentation. 

  

Does the automated system apply collections received from the debt collection center according to organization application rules?

Warrant that your process communicates changes, enhancements, and modifications of business requirements verbally and through written documentation to project managers, sponsors, and other stakeholders so that issues and solutions are understood as well as potential ramifications. 

  

Are updates completed in accordance with configuration management policy and procedures?

Make sure your company is responsible for gathering all business requirements and managing (internal) client changes in order to successfully launch a new (internal) client asset or update an existing (internal) client asset. 

  

### DATA:

  

Which is a testing related aspect of configuration management most likely to have broken down?

Establish that your team is involved in Test Planning, Test Estimation, Test Strategy, Work Load Design, Test Cases Design, Test Environment Setup, Test Data Setup, Defect Management and Configuration Management. 

  

What activities should the information system owner conduct when a system is decommissioned?

Develop experience developing and implementing tools to conduct requirements management and traceability, configuration management, risk management, and data management. 

  

Do you need a built in survivability solution that ensures communications continue during outages?

Certify your team is responsible for developing processes and providing configuration management protocol for technical data products. 

  

Have the various types of reports, the content, and frequency of reporting been defined?

Ensure proper configuration management and change controls are implemented to preserve the integrity of the data and the quality of the reporting packages provided to the end user. 

  

Are there particular difficulties in the area of configuration management and change control?

Operationalize the product data structure, configuration management, and change management of the product. 

  

How can utilities evaluate vendor solutions for applicability to respective deployments?

Utilize, alter, and/or create staffing models to evaluate manpower requirements across multiple areas under Wilton Configuration Management and Master Data groups. 

  

Which specifies access privileges to a collection of resources by using the URL mapping?

Work with Development, Configuration Management and other teams to classify the risk level of all applications using PHI, PII or other confidential data. 

  

How do you improve security of images being deployed?

Oversee the Technology Asset Management function, including the Configuration Management Database, and logical and physical asset management and tracking. 

  

Does formal monitoring of security logs take place to identify and address potential intrusions or inappropriate use of data assets?

Verify that your strategy is involved in Data Ops concepts and tools around workflow orchestration, monitoring, version control, CI/CD and configuration management. 

  

Does your organization achieve a dramatically more effective return on its development and operational assets by implementing common change governance and administrative processes?

Guarantee your workforce is involved in Linux and Windows infrastructures, database SQL and NoSQL, CI/CD tools, Configuration Management, development languages like Go, JavaScript, PHP, Python, Perl, Ruby. 

  

### PROJECT:

  

Do all network infrastructure devices require PKI based authentication/credentials for login?

Certify your organization manages changes to the requirements as they evolve during the project by using the Configuration Management procedure Maintains bidirectional traceability among the requirements and the work products. 

  

Has the difference between the plan and the actual situation been analyzed at the right timing when the most accurate estimation can be obtained?

Manage project plan, risk plan, QA plan, requirements management process and configuration management process for project with priority. 

  

Has a configuration management plan been prepared for each project according to a documented procedure?

Create and manage project plan components including project schedule, risk management plan, requirements management plan, configuration management plan, staffing plan, and others with priority. 

  

Does the automated system provide data to support corrective action plans as penalties and/or sanctions?

Be sure your operation develops configuration management documentation based on enterprise and project requirements. 

  

How do you find the reporting functionalities of the software?

Adhere to project development processes including documentation, defect tracking, software configuration management, and status reporting. 

  

Are system developers/integrators required to implement and document a configuration management process that tracks security flaws?

Confirm that your process works closely experienced in Project Planning, Project Assessment and Control, Decision Management, Risk Management, Configuration Management, Information Management, and Measurement. 

  

Do drawings comply with Customer requirements for drawing format, reproduction, storage and delivery?

Comply with Asset Management, Configuration Management, Project Governance and Project Controls Policies and procedures. 

  

Which configuration management system processes keeps track of the changes so that the latest acceptable configuration specifications are readily available?

Develop experience directly implementing and maintaining project change/configuration management policies, plans, and procedures. 

  

Which function supports a customer who would like to have a predefined work plan for repetitive maintenance work?

Support CM Boards and Project Teams through activities and deliverables such as project status reports, design documents, design validation, migration planning, service delivery guidance, and implementation support documents. 

  

Do you create configuration management reports from the configuration management system?

Will work closely with (internal) clients and members of the Information Assurance Team to both create detailed specification documents with clear project deliverables and timelines, and to ensure timely completion of deliverables.