A security baseline is a standard group of settings that helps devices start from a safer configuration.
Instead of deciding every security option one computer at a time, a business can apply a consistent set of rules across many systems.
A baseline may include firewall settings, password protections, encryption, browser controls, antivirus settings, and restrictions on risky features.
Microsoft provides security recommendations for Windows and Microsoft 365 environments, and other organizations publish industry guidance as well.
A baseline should still match the needs of the business. Some settings may interfere with older applications or specialized equipment, so testing is important.
The value of a baseline is consistency. If every computer is configured differently, weak settings are easier to miss.
Security becomes easier to manage when the organization knows what a properly configured device should look like.