An annual information security assessment has revealed that several OS-level configurations are not in
compliance due to outdated hardening standards the company is using. Which of the following would be BEST
to use to update and reconfigure the OS-level security configurations?


A. CIS benchmarks
B. GDPR guidance
C. Regional regulations
D. ISO 27001 standards