Bottom line: To effectively implement the Agent Baseline, organizations should prioritize controls that address common vulnerabilities in the most critical environments.
What's happening: Microsoft's Agent Baseline is a set of 35 security controls designed to help organizations secure their Windows 10 devices. The baseline includes controls for Windows Defender, Windows Update, and Windows Firewall, as well as vulnerability management and incident response. The controls are categorized into six security outcomes: secure configuration, data protection, and deployment and management of software updates.
What to do: Security leaders should start by reviewing the Agent Baseline controls and identifying the specific controls relevant to their organization's use of agents for coding, internal, and production environments. They should then prioritize these controls and develop a plan to implement them, starting with the most critical environments.