public:99_annexes:annex-b-terms-and-definitions:s:security_baseline

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
public:99_annexes:annex-b-terms-and-definitions:s:security_baseline [2026/09/12 17:42] – ↷ Page moved from private:99_annexes:annex-b-terms-and-definitions:s:security_baseline to public:99_annexes:annex-b-terms-and-definitions:s:security_baseline nick_didopublic:99_annexes:annex-b-terms-and-definitions:s:security_baseline [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido
Line 1: Line 1:
 ====== Security Baseline ====== ====== Security Baseline ======
  
-[[private:99_annexes:annex-b-terms-and-definitions:start|Go to Terms and Definitions]]+[[public:99_annexes:annex-b-terms-and-definitions:start|Go to Terms and Definitions]]
  
 ===== Discussion ===== ===== Discussion =====
  
-A Security Baseline is a specialization of [[private:99_annexes:annex-b-terms-and-definitions:b:baseline|Baseline]] that establishes an approved reference for security controls, configuration values, constraints, and expected security characteristics.+A Security Baseline is a specialization of [[public:99_annexes:annex-b-terms-and-definitions:b:baseline|Baseline]] that establishes an approved reference for security controls, configuration values, constraints, and expected security characteristics.
  
 The general concept of Baseline provides the controlled reference against which a subject can be compared, evaluated, changed, or restored. The general concept of Baseline provides the controlled reference against which a subject can be compared, evaluated, changed, or restored.
Line 11: Line 11:
 A Security Baseline applies that concept to the security characteristics of a subject such as: A Security Baseline applies that concept to the security characteristics of a subject such as:
  
-  * An [[private:99_annexes:annex-b-terms-and-definitions:i:infrastructure_environment|Infrastructure Environment]] +  * An [[public:99_annexes:annex-b-terms-and-definitions:i:infrastructure_environment|Infrastructure Environment]] 
-  * A [[private:99_annexes:annex-b-terms-and-definitions:m:machine_image|Machine Image]]+  * A [[public:99_annexes:annex-b-terms-and-definitions:m:machine_image|Machine Image]]
   * An operating system   * An operating system
   * A network   * A network
Line 19: Line 19:
   * A service   * A service
   * A device   * A device
-  * An [[private:99_annexes:annex-b-terms-and-definitions:a:artifact|Artifact]]+  * An [[public:99_annexes:annex-b-terms-and-definitions:a:artifact|Artifact]]
  
 A Security Baseline may identify: A Security Baseline may identify:
Line 36: Line 36:
   * Data-protection settings   * Data-protection settings
   * Applicable constraints   * Applicable constraints
-  * Applicable [[private:99_annexes:annex-b-terms-and-definitions:a:acceptance_criteria|Acceptance Criteria]]+  * Applicable [[public:99_annexes:annex-b-terms-and-definitions:a:acceptance_criteria|Acceptance Criteria]]
  
 A Security Baseline differs from a security policy: A Security Baseline differs from a security policy:
Line 48: Line 48:
   * The observed security state identifies the security characteristics present in the evaluated subject   * The observed security state identifies the security characteristics present in the evaluated subject
  
-Comparing the observed security state with the Security Baseline may identify a [[private:99_annexes:annex-b-terms-and-definitions:c:compliance_finding|Compliance Finding]].+Comparing the observed security state with the Security Baseline may identify a [[public:99_annexes:annex-b-terms-and-definitions:c:compliance_finding|Compliance Finding]].
  
 ===== Definition ===== ===== Definition =====
  
-//[[private:99_annexes:annex-b-terms-and-definitions:b:baseline|baseline]] that establishes an approved reference for the security controls, configuration values, constraints, and expected security characteristics of a subject//+//[[public:99_annexes:annex-b-terms-and-definitions:b:baseline|baseline]] that establishes an approved reference for the security controls, configuration values, constraints, and expected security characteristics of a subject//
  
 ===== Source ===== ===== Source =====
Line 80: Line 80:
 ===== Example ===== ===== Example =====
  
-A Security Baseline for a [[private:99_annexes:annex-b-terms-and-definitions:r:rhel|Red Hat Enterprise Linux]] Machine Image specifies permitted services, authentication settings, cryptographic settings, logging requirements, file permissions, network controls, and required security patches. An evaluator compares the resulting Machine Image with that Security Baseline to determine whether the image satisfies the applicable security requirements.+A Security Baseline for a [[public:99_annexes:annex-b-terms-and-definitions:r:rhel|Red Hat Enterprise Linux]] Machine Image specifies permitted services, authentication settings, cryptographic settings, logging requirements, file permissions, network controls, and required security patches. An evaluator compares the resulting Machine Image with that Security Baseline to determine whether the image satisfies the applicable security requirements.
  
 ---- ----
  • public/99_annexes/annex-b-terms-and-definitions/s/security_baseline.1789260167.txt.gz
  • Last modified: 2026/09/12 17:42
  • by nick_dido