Includes compliance requirements for, but not limited to, hardware configuration, software configuration, financials, service, process, and security. Document the baseline requirements. Create a new baseline when prompted by changes in the business, IT, or regulations.