systems has been the subject of a number of papers and guidelines dating at
least as far back as 1988, when the NSA’s National Computer Security Center
(NCSC) published A Guide to Understanding Configuration Management in
Software Security Assurance State-of-the-Art Report (SOAR) 113