Develop a security baseline to integrate with the vulnerability scanning platform to alert about any server not aligned with the new security standards.

Create baseline images for each OS in use, following security standards, and integrate the images into the patching and deployment solution.

Build all new images from scratch, installing only needed applications and modules in accordance with the new security standards.

Run a script during server deployment to remove all the unnecessary applications as part of provisioning.