Security Baselines

This list is non exhaustive and we can also write security baselines for specific products.

Those security baselines allow your ICT organization to configure all applications, OS, infrastructure components homogeneously.For each technology, we collect all configuration parameters which need special attention from security perspective. Some equipment is provided with insecure parameters by default (default password, SNMP write enabled, debug feature enabled, wide ACL). Security features are not enabled by default most of time. Manual configuration is required to enable them.
Moreover, usage of security baselines demonstrates good maturity level and governance in your organization.

If a part of your ICT is outsourced, it’s even more important to setup security baselines carefully. In some organizations, “RUN” is outsourced but not security governance. By setting up security baselines, you can ensure that your ICT partner is following your guidelines and standard to configure equipment. We are able to automatize verification of security parameters. These validations can be automatically scheduled to run periodically to ensure that equipment is set inline with baselines.