Citation[]
Department of Defense, Guide to Understanding Configuration Management in Trusted Systems (NCSC-TG-006-88) (Mar. 28 1988) (full-text) (known as the "Orange Book").
Overview[]
The guidelines described in this document provide a set of good practices related to configuration management in [[Automated Data Processing]] (ADP) systems employed for processing classified and other sensitive information.