Introduction to Configuration Management and System Hardening

Module 1 introduces the foundational concepts of configuration management and system hardening, explaining why consistent, secure configurations are critical to cybersecurity operations. It establishes key terminology, objectives, and expectations for the course, and frames configuration management as an ongoing operational discipline—not a one-time technical task. This module sets the stage for understanding how hardened baselines reduce risk, improve resilience, and support effective incident response.

Module 2 explains what configuration compliance means in practice and why organizations rely on standardized baselines to reduce risk and maintain consistency at scale. It introduces the concept of a “known good” configuration and how baselines support repeatability, auditability, and faster detection of drift. This module sets up the rest of the course by showing how compliance expectations translate into real operational requirements.

Module 3 focuses on common configuration benchmarks and hardening standards used across IT and cybersecurity programs. It explains how frameworks such as CIS Benchmarks and DISA STIGs are developed, what they are intended to achieve, and how organizations use them as starting points rather than one-size-fits-all solutions. This module helps learners understand how to select and apply benchmarks in a practical, risk-informed way.

Module 4 focuses on scanning systems for configuration compliance to verify that hardened baselines are actually in place and to detect drift over time. It explains how compliance scans compare real-world settings against standards such as CIS Benchmarks and DISA STIGs, and what the results typically tell you about gaps and risk. This module helps learners understand how to interpret findings and use them to prioritize practical remediation.

Module 5 focuses on maintaining configuration baselines over time and using them effectively during incident response. It explains how known-good configurations help teams quickly identify unauthorized changes, reduce uncertainty during investigations, and accelerate system recovery. This module reinforces why configuration management is not a one-time effort, but a foundational capability for both security operations and incident response.

Module 6 focuses on applying configuration management and system hardening concepts in smaller or resource-constrained environments. It explains how tools such as CIS-CAT Lite can be used to assess systems against benchmarks and identify high-impact configuration gaps without enterprise tooling. This module reinforces that effective configuration management is achievable at any size when approached pragmatically and with the right priorities.

Module 7 focuses on using the DISA SCAP tool to assess system compliance with DISA STIGs. It explains how to obtain and set up the tool, use the STIG Viewer, and review compliance results in a structured way. This module provides practical exposure to performing STIG-based assessments to support stronger configuration management and cybersecurity posture.

Test your knowledge after taking our course!