On Linux systems used in production environments, security work usually starts with the machine itself. Kernel updates, SSH ...