Secure configuration management

Definition
A secure configuration management is

"[t]he set of procedures appropriate for controlling changes to a system's hardware and software structure for the purpose of ensuring that changes will not lead to violations of the system's security policy."