I use a couple different resources here based on the client. The two I have implemented the most are CIS level 1 benchmarks, https://www.cisecurity.org/cis-benchmarks/, and occasionally the DOD Stigs. https://public.cyber.mil/stigs/downloads/. The ...