These ones may help.
https://techcommunity.microsoft.com/t5/itops-talk-blog/windows-server-101-hardening-iis-via-security-control/ba-p/329979
https://www.microsoft.com/security/blog/2020/04/16/security-guidance-remote-desktop-adoption/
--please don't forget to Accept as answer if the reply is helpful--