How often should a configuration baseline be updated?

A configuration baseline should be updated after a software upgrade or service pack deployment because these actions typically introduce significant changes to the system. Establishing a new baseline post-upgrade ensures that the updated configuration reflects the current state of the system, including new features, patched vulnerabilities, or modified settings. It allows organizations to maintain an accurate record of their configurations, which is crucial for effective security management, compliance checks, and systems auditing.

While it is also important to consider updates after incidents or to have a regular schedule, the most relevant and critical time to establish a new baseline is immediately following changes that impact the system's configuration.