Building baseline controls

Following on from the previous section, we will cover more specifics of the baseline controls that can be used for your Windows devices. Here we will cover the following:

• Center for Internet Security (CIS)
• Windows security baselines
• Intune's security baselines

Let's look at each of these options in detail.

CIS

First, we will look at CIS. You may already be familiar with CIS, and you will see CIS listed on a lot of most-popular-framework lists, although it's not a fully comprehensive framework like others listed previously. Instead, CIS is more of a tactical compilation of controls and guidelines that allow organizations to meet the requirements of a chosen framework. The following screenshot is of the current CIS home page, which can be visited at this link: https://www.cisecurity.org/.

Figure 2.5 – CIS home page

CIS is a non-profit organization comprising a global community to provide...