https://linuxsecurityblog.com/2015/08/31/linux-foundations-security-checklist-can-help-sysadmins-harden-workstations-pcworld/