Solutions · IT & Security
A continuous view of which settings, permissions and patches deviate, with the impact of every fix visible up front. You close digital doors and windows in a targeted way, with 85-95% less effort.
Measures against: CIS Benchmarks · NIS2 · ISO 27001/27002 · BIO2 · NEN 7510 · DORA
Sound familiar?
Hundreds of settings per operating system, and no view of what a change does to production.
Without a shared baseline, hardening gets confused with patch management, and the configuration stays untouched.
What does get done is not demonstrable. At an audit or claim, the searching starts all over.
The approach
You harden against the Easy2audit Baseline: comparable to CIS Level 1, but chosen so your systems stay reachable. Rolled out in phases, with continuous re-measurement.
The journey
Scan against the Easy2audit Baseline: per system you see which settings deviate and what the impact is.
Biggest risk reduction first. Settings with possible impact on workability are flagged up front.
Apply to a test group, re-measure, then roll out in phases across the rest.
Re-measure periodically: drift becomes visible as soon as a system deviates from the baseline.
In practice · Water Authority Aa en Maas
Water Authority Aa en Maas had to comply with the Dutch BIO baseline and faced some 400 security settings to check per operating system, with the requirement that availability and performance stayed intact. With Easy2audit they configured their systems more securely and became demonstrably compliant at the same time.
"For every security setting you see the possible impact on performance. That gave our administrators the confidence to apply measures without workability suffering."
Frequently asked questions
That is exactly what the process prevents: per setting you see the possible impact up front, you start on a test group and roll out in phases. Rollback is a basic principle, not an emergency measure.
A set of secure settings per platform, proven in practice, comparable to CIS Level 1 but chosen so systems stay reachable and workable. You measure against it, harden towards it and use it to prove where you stand.
No. You prioritise by risk reduction and work in steps; every re-measurement shows what is in place and what is still open.
30 minutes · online · no obligations