What are baseline security requirements that should be applied to