V-221255
Microsoft Exchange 2016 Edge Transport Server Security Technical Implementation Guide
Title
The Exchange software baseline copy must exist.
Description
<VulnDiscussion>Exchange software, as with other application software installed on a host system, must be included in a system baseline record and periodically reviewed; otherwise, unauthorized changes to the software may not be discovered. This effort is a vital step to securing the host and the applications, as it is the only method that may provide the ability to detect and recover from otherwise undetected changes, such as those that result from worm or bot intrusions. The Exchange softwar...
Fix Text (Documentation Requirement)
Implement an email software baseline process and update the EDSP.