V-240936

Discussion

Any changes to the components of the application server can have significant effects on the overall security of the system. In order to ensure a prompt response to failed application installations and application server upgrades, the application server must provide an automated rollback capability that allows the system to be restored to a previous known good configuration state prior to the application installation or application server upgrade.

Check Content

Interview the ISSO and/or the SA.

Determine if there is a local procedure to revert to the last known good configuration in the event of failed installations and upgrades.

If a procedure does not exist or is not being followed, this is a finding.