Microsoft provides ready-to-deploy security policies tailored to each of their operating system versions through the Security Compliance Manager (SCM).
More information about SCM can be found on the following page:
Microsoft also provides recommendations through their security baseline. For more
information, refer to the Microsoft documentation and recommendations: