Validate
Security hardening applies an agreed configuration baseline to the systems in scope and records what was changed. Novatelia adjusts the baseline when a business application would break. The result is a change record, not a certification. Benchmarks are selected for the platform, not invented as a Novatelia standard.
Definition
Novatelia implements systematic configuration hardening across enterprise assets to reduce attack surfaces. Scope encompasses disabling unnecessary services, enforcing disk encryption, locking down external USB ports, tightening browser policies, and auditing administrative privileges.
Inputs
- Target server and workstation baseline profiles
- Current Active Directory Group Policy Objects (GPOs)
- Operational requirements for external devices and peripherals
Outputs
- Operating system hardening baseline configuration (GPO / UEM scripts)
- Browser security baseline (extension restrictions, safe browsing)
- Centralized BitLocker/FileVault encryption enforcement
- Removable storage device control policy implementation
- Hardening verification test report
Sequence
- 1. Current configuration audit and baseline comparison
- 2. Draft hardening policy formulation in test environment
- 3. Pilot testing to identify application incompatibilities
- 4. Production policy rollout and verification
- 5. Handover documentation
Hardening benchmarks are tailored to prevent disruption to business-critical applications.
Questions this page answers
What is a hardening engagement?
An agreed configuration baseline applied to named systems, with exceptions where a business application would fail, and a record of the change.
Is the baseline a Novatelia certification?
No. The baseline is selected for the platform. Novatelia does not issue a certificate for the work.
Related
Related reading
Submit this requirement
The RFQ keeps a browser draft. It does not publish a price or issue a quotation reference.