Just because a recommendation is in a “best practices” document doesn’t mean it’s right for your network. Security expert Mark Burnett recently ran the DISA gold disk scanner against some of his very secure Windows systems. Some recommendations that don’t work on the computer youre applying it against — or worse, theyd “break” the computer. Most industry-accepted computer security guidelines contain flaws, but most of them don’t cause any harm, he says. There are many legitimate reasons for many recommendations, but many don’t — including some of these recommendations.”]
Source: https://www.csoonline.com/article/2633067/when-good-recommendations-go-bad.html