To ensure servers have no unnecessary features installed, IT administrators should compare the current server configuration against predefined baseline standards. These standards serve as a guide for the minimum necessary configurations and help identify any deviations, including unnecessary features or services that may introduce security vulnerabilities.
Reference = Baseline standards are a critical component of cybersecurity audits as they provide a clear framework for the secure configuration of systems. ISACA's resources emphasize the importance of using baseline standards as part of the cybersecurity audit process to manage and mitigate risks effectively123.