18 ncac 07j .0616          configuration management plan

A technology provider shall maintain a configuration management plan for systems supporting the electronic notary solution that addresses:

(1)           maintenance of an accurate inventory of items including:

(a)           software;

(b)           hardware; and

(c)           network components;

(2)           implementation of configuration settings which represent the most restrictive security settings compatible with the systems' operational requirements;

(3)           use of automated mechanisms to detect inventory and configuration changes;

(4)           prevention of unauthorized changes to the systems; and

(5)           evaluation of the potential security impact of proposed changes.

History Note:        Authority G.S. 10B-4; 10B-106; 10B-125(b); 10B-126; 10B-134.15; 10B-134.17; 10B-134.19; 10B-134.21; 10B-134.23;

Eff. July 1, 2025.