What it means
Configuration compliance validation compares live settings against approved baselines and verifies that findings are corrected or explicitly accepted.
Why it matters
A baseline provides value only when the organization can detect drift, explain exceptions, and confirm remediation.
Practical focus
- Automate comparisons where practical
- Protect baseline definitions and scanner configuration
- Prioritize high-impact drift
- Retest after remediation
Common mistakes
- Scanning without an owner or workflow
- Treating every difference as equal risk
- Suppressing recurring drift without root-cause analysis
- Reporting compliance without validating scope
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: