Secure configuration baselines is a cybersecurity control or practice. It supports this objective: defines approved hardened settings and detects unauthorized configuration drift. In practice, document the business and security objective, the system boundary, the owner and the evidence that will show the control is operating as intended.

ISO/IEC 27001:2022: https://www.iso.org/standard/27001