"Configurations, including security configurations, of hardware, software, services and networks shall be established, documented, implemented, monitored and reviewed."[1]

Create baseline configurations for each type of system component used in your company. Baseline configurations specify how a particular device such as a Windows computer should be configured. This includes documenting the default software to be installed on a system and its security settings. You need to establish baseline configurations for computers servers network devices software (operating systems) and printers. Periodically review and update your baseline configurations to reflect any new operational requirements.