System best practice configurations

Purpose

Define technical hardening standards within SBI.

Configuration areas

1. Account Policies – Enforce strong password, lockout, and access restrictions.

2. Local Policies – Apply least privilege principles and secure OS behaviours.

3. Firewall – Enforce a “default deny” posture with logging and defined rules.

4. Audit Policies – Ensure detailed logging for visibility and forensic readiness.

5. System & Application Hardening – Disable insecure protocols, restrict risky features, enable advanced protections.

6. Pre-installed Security Agents –

   • Nessus (Vulnerability Management System): Vulnerability scanning (requires activation).

   • Splunk: Centralised logging (requires activation).

   • TrendMicro: Endpoint protection (requires activation).

   • CrowdStrike: (Coming soon).

Outcome

These best practices ensure systems are resilient against common attack vectors, support audit readiness, and maintain a consistent WOG security posture.