Establish and document standard baseline configurations for all platforms in the CNCS information technology environment and ensure these standard baseline configurations are appropriately implemented, tested, and monitored for compliance with established CNCS security standards. This includes documenting approved deviations from the configuration baselines with business justifications. Pending since 2018