12.3 Setting a Baseline

To set a baseline, you must ensure that a group of devices is protected and that all the devices in the group are patched consistently. For more information, see Section 7.0, Using Mandatory Baselines.

It is also highly recommended that the customer does NOT deploy all patches using mandatory baseline. A s stated above, some patches can require a reboot, if an attempt was made to deploy all patches via the baseline, without being aware of the consequences of each individual patch, then your system could become unstable, or the patch updating process could be compromised.

It is of vital importance that this method is discussed by the PVG, and a suitable strategy is agreed upon. Industry recommendations are to use a standardized configuration to manage IT resources.