We recommend that BSC formally document and approve a set of configuration standards for each operating platform in its network environment, and that the settings reflect the most restrictive mode consistent with the operational requirements. If BSC leverages existing configuration standards (e.g., CIS benchmarks) as a guide, then BSC’s standards should document the deviations and exceptions required for its unique technical environment.