I'll parse my concurrence to @LinuxBender's suggestion: Go with the CIS benchmarks[1^] vs. the NIST, at least initially. The former is written in "common engin

I'll parse my concurrence to @LinuxBender's suggestion: Go with the CIS benchmarks[1^] vs. the NIST, at least initially. The former is written in "common engineering language," while the latter uses a lot of governmentish/ pseudo-legalese that often raises more questions than it answers (IMHO). [1]: https://www.cisecurity.org/blog/cis-benchmarks-june-2021-update/ https://www.cisecurity.org/blog/cis-benchmarks-june-2021-upd...