Secure Configuration Review Checklist

A hardening checklist for system administrators, cloud engineers and auditors reviewing servers, cloud accounts, network devices and databases. Default passwords, open management ports, public storage buckets and admin roles nobody uses are what most configuration reviews find.

Items are grouped by platform and point to the matching CIS Benchmark section where one exists, so you can check a system against a published baseline instead of opinion. Use it as a self-assessment, to prepare for an audit, or as the baseline your infrastructure team builds new systems to.

What's inside:

• Windows and Linux server hardening checklist
• Cloud security configuration (AWS, Azure, GCP)
• Network device configuration standards (firewalls, routers, switches)
• Database security configuration guidelines
• Web server and application server hardening
• Container and Kubernetes security baselines
• CIS Benchmark alignment guide