Editing Configuration management (section)

===Information assurance===
For [[information assurance]], CM can be defined as the management of security features and assurances through control of changes made to hardware, software, firmware, documentation, test, test fixtures, and test documentation throughout the life cycle of an information system.<ref>[[National Information Systems Security Glossary]]</ref>{{Better source needed|date=August 2021|reason=Wikipedia is not a [[WP:RS|reliable source]]}} CM for information assurance, sometimes referred to as ''secure configuration management'' (SCM), relies upon performance, functional, and physical attributes of IT platforms and products and their environments to determine the appropriate security features and assurances that are used to measure a system configuration state. For example, configuration requirements may be different for a [[network firewall]] that functions as part of an organization's Internet boundary versus one that functions as an internal local network firewall.