Scope

This Secure Configuration Guide (SCG) applies only to the following:

• Configuration of tenant/organization
• Configuration of Identity and Access Management
• Configuration of API Token
• Configuration of Webhooks
• Configuration of Network segmentation and Zero Trust enforcement
• Logging, monitoring, and integration with an agency SIEM per FedRAMP guidelines
• Change management and configuration baselines per FedRAMP guidelines
• Implementation of SSID/WLAN, and wired encryption settings per FedRAMP guidelines
• Guidance to ensure networking devices are running recommended firmware for security patches