Overview
Use this checklist to verify that operating systems, networks, applications, and cloud services are hardened according to best practices and organizational standards.
Operating System Hardening
- Apply latest security patches
- Disable unnecessary services and daemons
- Enforce strong password and lockout policies
- Configure file system permissions and ownership
- Enable host-based firewalls
- Configure secure logging and log rotation
- Remove default or unused accounts
Network Hardening
- Restrict inbound and outbound traffic to required ports
- Segment networks using VLANs or subnets
- Enforce least privilege in firewall rules
- Use secure protocols (HTTPS, SSH, TLS) instead of plaintext
- Monitor network traffic for anomalies
- Protect administrative interfaces
Application Hardening
- Disable debug and test endpoints in production
- Enforce secure configuration defaults
- Validate input and sanitize output
- Use secure session management
- Encrypt sensitive data at rest and in transit
- Restrict administrative features to authorized users
Cloud Service Hardening
- Disable public access to storage and databases
- Enforce encryption at rest and in transit
- Restrict management APIs to trusted networks
- Use managed identities and roles instead of static keys
- Enable logging and monitoring for all services
- Apply CIS Benchmarks or provider best practices
Identity and Access Hardening
- Enforce multi-factor authentication
- Use role-based access control (RBAC)
- Apply least privilege to all roles and permissions
- Review access regularly
- Disable or remove unused accounts and credentials
- Monitor privileged access activity
Evidence and Verification
- Document hardening steps and configurations
- Store configuration snapshots
- Run regular hardening audits
- Map hardening controls to compliance frameworks
- Retain evidence for audits
Conceptual Diagram
Identify Assets → Apply Hardening → Verify Configuration → Monitor Changes → Audit & Evidence
Frequently Asked Questions
What is system hardening?
System hardening reduces the attack surface by disabling unnecessary services, enforcing secure configuration, and applying security controls.
Why is a hardening checklist important?
A hardening checklist ensures consistent security practices across systems and supports compliance frameworks.