This recipe provides information on activities that should be performed before creating a compliance baseline and installing Security Compliance Manager.
In order to create a meaningful and successful basic compliance program, it is essential that a clear understanding of your goals exists. As mentioned in Chapter 1, Starting the Compliance Process for Small Businesses, you have to define what you want to achieve with your compliance program. The creation of the compliance baseline using Security Compliance Manager will affect part of your company or all of your company's users and/or systems, as it is based on the domain policy. For example, if you introduce a stricter password policy, all the appropriate stakeholders must be involved.