From the Centre for Internet Security.
What are the benchmarks?
For the first time ever, a large group of user organizations, information security professionals, auditors and software vendors have defined consensus technical control specifications that represent a prudent level of due care and best-practice security configurations for computers connected to the Internet.
<Now for someone to figure out how to do the same for privacy!>