CyberGlossary

Defense & Operations

Security Baseline

Also known as: Security configuration baseline, Hardening baseline

Definition

A documented, minimum-acceptable security configuration that all systems of a given type must meet before being placed into production.

A security baseline specifies the settings, controls, and policies required for a system class — Windows endpoint, Linux server, AWS account, Kubernetes cluster, mobile device — typically derived from CIS Benchmarks, DISA STIGs, vendor guidance, and internal risk requirements. Baselines cover authentication, logging, encryption, services, ports, and account hygiene, and they form the contract checked by configuration management, audits, and CSPM tooling. Compliance against a baseline is continuously verified; deviations require risk acceptance or remediation. Effective baselines reduce variability, shrink the attack surface, and enable scalable security operations.

Examples

  • A Windows 11 corporate baseline aligned with the CIS Level 1 Benchmark.
  • A baseline for AWS accounts requiring CloudTrail, GuardDuty, MFA root, and SCP guardrails.

Related terms