Information
Uncontrolled, untested, or unmanaged changes result in an unreliable security posture. All changes to software libraries related to the database and its use need to be reviewed, considered, and the responsibility for CM assigned. CM responsibilities may appear to cross boundaries. It is important, however, for the boundaries of CM responsibility to be clearly defined and assigned to ensure no libraries or configurations are left unaddressed. Related database application libraries may include third-party DBMS management tools, DBMS stored procedures, or other end-user applications.
NOTE: Nessus did not perform this check as it requires manual verification.
Solution
Develop, document and implement configuration management procedures or processes.
Ensure the 4 major requirements listed in the check are documented at a minimum.
Assign responsibilities for oversight and approval for any and all changes made to DBMS software and configuration.