Secure Configuration Baselines (Hardening)
Secure baseline ('golden image') configurations are applied to workstations and servers, following CIS Benchmarks.
Legacy insecure protocols are deprecated across the environment.
Directory services are hardened against attack paths using identity attack-path assessment.
Framework Alignment: NIST CSF PR.PS; CIS Control 4; CMMC Level 1; GDPR Art. 32, 25; ISO 27001:2022 A.8.9