Establish and maintain baseline configurations and inventories of organizational systems (including hardware, software, firmware, and documentation) throughout the respective system development life cycles.

Baseline configurations are documented, formally reviewed, and agreed-upon sets of specifications for systems. Baseline configurations serve as a basis for future builds, releases, and changes to systems. A documented baseline configuration establishes how a system should be configured. Baseline configurations should be designed based on the principle of least functionality.

Create baseline configurations for each type of system used in your company. Baseline configurations specify how a particular device such as a Windows computer should be configured. This includes documenting the default software to be installed on a system and it's security settings. You need to establish baseline configurations for computers, servers, network devices, and printers. Periodically update your baseline configurations to reflect any new operational requirements. Maintain a list of all hardware systems (workstations, servers, network devices, printers, etc.) used in your company. Maintain a list of all software used on your systems.