ISM-1409

Operating systems are hardened using ASD and vendor hardening guidance, with the most restrictive guidance taking precedence when conflicts occur.

Topic
Hardening operating system configurations
Applicable to
all

History

Priority
should
Dec 2023
Operating systems are hardened using ASD and vendor hardening guidance, with the most restrictive guidance taking precedence when conflicts occur.
The existing control relating to operating systems being hardened using ASD and vendor hardening guidance was amended to recommend that the most restrictive guidance take precedence when conflicts occur.
Sep 2023
Operating systems are hardened using ASD and vendor hardening guidance.
References to ‘ACSC’ were replaced with ‘ASD’.
Sep 2023
Operating systems are hardened using ASD and vendor hardening guidance.
The existing control covering hardening of operating systems was reworded to ensure consistency of language with similar controls.
Jun 2023
ACSC and vendor hardening guidance for operating systems is implemented.
A minor grammatical change was made to an existing control relating to applying ACSC and vendor hardening guidance for operating systems.
2015
When using a Microsoft Windows operating system, to harden its configuration agenciesshould use the applicable SOE Build Guideline from the Common Operating EnvironmentPolicy produced by the Department of Finance.