Secure Baseline Configurations

A secure baseline configuration is a group of settings that configures an IT asset with a basic level of innate security and leaves it better protected from attack.

In support of the Secure Configuration Management Policy, the Office of Cybersecurity has created Vanderbilt-specific secure baseline configurations aligned with industry standards. The list below includes secure configurations that are currently available. Select your operating system version in the table below to be taken to the appropriate secure baseline configuration resources.

Cybersecurity is evaluating and creating secure configurations for additional OS versions to support the VU community. As new secure configurations are developed, we will publish them here. If you do not see your OS listed, please reach out to us at it.risk@vanderbilt.edu

It is important to note that the secure baseline configuration is the minimum level of security required for an IT asset. If your IT asset is storing or processing Level 3 data Restricted Vanderbilt data, there may be additional requirements to comply with specific laws and regulations governing that data. If your IT asset is storing or processing Level 4 Critical data, please reach out to it.risk@vanderbilt.edu for specific guidance. 


Below is a curated view of the security policies, services, and guidance documents that are directly relevant to IT professionals. These resources can be found in other sections of this site, but have been organized here for your consolidated view. For full listings, use the navigation bar at the top of this page.

Question icon

Not sure how to start?

Get in touch if you don’t know where to begin, you can’t find the guidance needed on the website, or if you just want to learn more. The Office of Cybersecurity has subject matter expertise and is here for Vanderbilt community to discuss security questions or concerns.

Get Security Help