Security Baseline Controls
The term "baseline" refers to basic requirements. A security baseline refers to an organization's minimum basic requirements for security. The objective of implementing a security baseline throughout an organization is to ensure that controls are consistently implemented as per the acceptable risk levels. The baseline is set as per asset classification. For example, for critical applications, it is mandatory to have at least two-factor authentication, whereas for non-critical applications, it is mandatory to have at least one-factor authentication.
The following are the benefits of having a security baseline:
- It helps to standardize the basic security requirements throughout the organization.
- A baseline provides a point of reference against which improvements can be measured.
- It helps to establish a uniform process of system hardening for similar types of systems.
Developing a Security Baseline
A security...
