What Is a Security Baseline?

A security baseline is a documented minimum standard of controls and configurations that a system is required to satisfy. In a pipeline it becomes the reference state that automated checks compare each build or deployment against. Falling below the baseline fails the check and blocks the change.

Why it matters

A baseline turns vague security intentions into concrete, testable requirements. It prevents gradual drift where small exceptions accumulate into a weak posture.

Related guides