Harden Systems: Follow best practices for system hardening, which includes disabling unnecessary services and ports, removing default accounts and credentials, and applying security configurations specific to the operating system in use.
Limit Information Disclosure: Configure systems to minimize the amount of information exposed in error messages, banners, and system responses. This includes modifying web server headers, email headers, and other service responses to not reveal OS details.