The below standards cover all major hardware and software to be installed in the CDE. The main goal of this document is to:

1. Restrict physical access
2. Minimise the attack vector for attackers from the systems

If a particular piece of hardware / software is not included in this document then a document should be developed using best practices with these two points in mind.

Network Devices

Windows server

Config Guide