What is a baseline?
1) The worst security state.
2) The best security state.
3) Taking an accurate account of the desired standard state.
4) The vendor distribution of the software.