Guillermo wants to establish his organization’s security baseline for Linux systems. After selecting the CIS benchmark that best matches his organization’s commonly used Linux distribution, what should he do next?

Reviewing any baseline to determine its fit for the organization and how the organization’s systems and services operate is an appropriate next step after selecting a benchmark. Deploying SELinux may be necessary for some features depending on the distribution in use, but nothing in the question indicates that this is required. Once the benchmark has been modified to purpose and suitability, it can be tested, and further modifications can be made if necessary. Finally, it can be deployed and managed.