NIST Special Publication 800-128:

Guide for Security-Focused Configuration Management of
Information Systems