Adopting standard server configurations is a proven method of reducing operating risk. The foundation for establishing a standard server configuration regimen is implementing clear policies and standards. A server configuration security policy is a clear statement of what the enterprise servers are and how they are to be managed and updated. Use this policy template to help set the enterprise's server configuration security policy by determining: appropriate access controls, baseline security physical security controls, supported server operating systems, formal change management processes. and event and log file management steps.