The need for a standardized baseline configuration or Gold build standard is a keystone of all compliance frameworks.
https://www.newnettechnologies.com/gold-image-secure-baseline-configuration-standard.html