Glossary: Policies, Standards and Risk Management

benchmark

Also written: benchmarks

A published list of recommended security settings for one product, each with a reason and a way to check it. It is outside advice until a company adopts it as its own baseline.