Windows Server hardening standards

2 pointsmindfrost822 comments

I've been reading about CIS Benchmarks and DISA STIGs for Windows Server hardening. Does anyone have any input on these or using a different standard?

View on HN

STIGs are probably too tight. Sometimes they assume that you aren't networked.

CIS Benchmarks are consensus-driven and are a good starting place.

That's been my impressions so far too.

Reply on news.ycombinator.com