Auditing a Device without hardening Guide

Hi there,

What if the client has a device without a \
1) hardening guide
2) CIS Policy
3) Hardening Standards

How would we go about hardening the devices?

Can you share a little more on what device? Android or iOS? It must be running off some platform?

If it is then there must be some basic hardware configurations to harden it.

It is a network device by Huawei.