Automated information handling system hardening optimization systems and methods

A non-transitory computer-readable storage medium storing program instructions, thereupon, that upon execution by an information handling system causes the information handling system to:

• retrieve an initial information handling system hardening configuration option, from a plurality of information handling system hardening configuration options;
• harden a subject information handling system based, at least in part, on the initial hardening configuration option;
• run an information handling system hardening verification tool to verify that the subject information handling system is in compliance with a compliance checklist;
• run end-to-end tests on the subject information handling system, in response to verification that the subject information handling system is in compliance with the compliance checklist;
• determine that the initial hardening option is a best hardening option for the subject information handling system, in response to passing of the end-to-end tests;
• and
• repeat, in response to the subject information handling system not passing the end-to-end tests, and until a determination of a hardening option of the plurality of information handling system hardening configuration options is best hardening option for the subject information handling system:
• retrieve a next information handling system hardening configuration option from the plurality of information handling system hardening configuration options;
• harden the subject information handling system based, at least in part, on the next hardening configuration option;
• run the information handling system hardening verification tool to verify that the subject information handling system is in compliance with the compliance checklist;
• run the end-to-end tests on the subject information handling system, in response to verification that the subject information handling system is in compliance with the compliance checklist;
• and
• determine the next hardening option is the best hardening option for the subject information handling system, in response to passing of the end-to-end tests.

A method comprising:

• retrieving an initial information handling system hardening configuration option from a plurality of information handling system hardening configuration options;
• hardening the information handling system based, at least in part, on the initial hardening configuration option;
• running an information handling system hardening verification tool to verify that the information handling system is in compliance with a compliance checklist;
• running end-to-end tests on the information handling system, in response to verification that the information handling system is in compliance with the compliance checklist;
• determining whether the initial hardening option is a best hardening option for the information handling system, in response to passing of the end-to-end tests;
• and
• repeating, in response to the information handling system not passing the end-to-end tests, and until a determination of a hardening option of the plurality of information handling system hardening configuration options is the best hardening option:
• retrieving a next information handling system hardening configuration option from the plurality of information handling system hardening configuration options;
• hardening the information handling system based, at least in part, on the next hardening configuration option;
• running the information handling system hardening verification tool to verify that the information handling system is in compliance with the compliance checklist;
• running the end-to-end tests on the information handling system, in response to verification that the information handling system is in compliance with the compliance checklist;
• and
• determining the next hardening option is the best hardening option for the information handling system, in response to passing of the end-to-end tests.