Baseline & Standards Library

Baselines are first-class, versioned, machine-readable objects — not documents. The Architect authors them; the audit agents check every device against them.

▸ Golden config — Cisco PE (Transport)

Version history · v14 ▾

Structured policy object. This golden config is versioned with tracked diffs; the Baseline Analyzer diffs every PE/CE router against it. Author: Bima H. · approved via CR-8841.

v14

Current — added mgmt-plane ACL hardening28 Jun · Bima H. · 12 devices re-scanned

v13

SNMPv3-only, disabled telnet02 Jun

Cross-framework mapping

One control, many frameworks. e.g. "N-interface encryption (IPsec)" maps to 3GPP TS 33.513 ENISA #NET-04 NIST SC-8 — a single finding satisfies all three at once.

Custom fields supported on every baseline object · KPI-frameworks for DGEP-style scoring configurable.