Simple definition
A set of reference safety settings applied consistently.
Technical definition
A Securityhouse defines minimum values for accounts, encryption, logging, services, protocols and other parameters.
What is it used for ?
Standardize configuration and detect deviations.
Practical example
A Windows-based e-mail may impose BitLocker, on firewall and session lock settings.
Common issues
- Ok too strict for some applications
- Undocumented deviations
- Parameters not maintained over time
Related terms
Key takeaway: This entry explains the general operation of the term. Exact settings may vary depending on software, vendors and environments.