System Hardening Fundamentals

System Hardening Fundamentals is about reducing the attack surface of systems before attackers ever reach them. Hardening doesn't catch incidents. It prevents them, or limits their impact when prevention fails. The work is unglamorous but produces some of the highest returns of any security investment: incidents that don't happen don't need investigating.