Hi Peter,

My apologies that nobody has seen this discussion before now. I'm not sure what you exactly mean by a 'Minimal Security baseline document', but we do have guides on various security-related topics for JBoss EAP 6: https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/?category=security&version=6.4

In particular, the guide on How to Configure Sever Security might be helpful.

Otherwise, if you have a particular security concern for your environment, I would suggest that you open a support case so our support staff can have a look at your configuration and answer any specific questions you might have.