Before closing this section, I want to say a few words about the Health Check feature, which you can access by going to Setup | Security | Health Check:
This tool lets us check our security configurations against Salesforce base policies (you can even upload a custom baseline to restrict or extend policies), and it provides an overall security score.
The baseline is composed of different items with a default risk level (high, medium, low, and informational). With custom baselines, you can define which are your actual risk levels.
Here is an exploded risk category:
Each item has a status (Critical, Warning, or Compliant), a grouping column, and the reference and applied values for the given metric. Each row has an Edit link that brings you to the proper setup page to mitigate the risk.
Use the Fix Risks button to automatically upgrade to the baseline standard values. Not everything can be changed with this button—for elements that can't be changed, proceed manually:
To create a new baseline, refer to Salesforce Help (https://help.salesforce.com/articleView?id=security_custom_baseline_file_requirements.htm&type=5).