03.04.01 Baseline Configuration
03.04.02 Configuration Settings
03.04.03 Configuration Change Control
03.04.04 Impact Analyses
03.04.05 Access Restrictions for Change
03.04.06 Least Functionality
03.04.08 Authorized Software
03.04.10 System Component Inventory
03.04.12 System and Component Configuration for High-Risk Areas