Understand the Purpose of This Guidance:

The purpose of the guidance is to provide security-relevant code and configuration recommendations.