Configuration management is the practice of establishing and maintaining consistency in the settings and parameters of the infrastructure components configuration. It encompasses a set of policies, procedures, and tools that ensure that systems are configured securely, consistently, and in compliance with organizational standards and regulatory requirements.
Effective configuration management plays a crucial role in reducing the attack surface, preventing unauthorized changes, and maintaining the integrity of information systems.