Center for Internet Security

Measurably reducing risk through collaboration, consensus & practical security management
The Center for Internet Security (CIS) is a not-for-profit organization that helps enterprises reduce the risk of business and e-commerce disruptions resulting from inadequate technical security controls, and provides enterprises with resources for measuring information security status and making rational security investment decisions.
DOWNLOAD FREE OF CHARGE
40 consensus Security Configuration Benchmarks for Operating Systems, Middleware, Software Applications and Network Devices. Click Here to download the Benchmarks.
CIS Configuration Benchmark Scoring Tools
Click Here for more information.
Consensus Based Metrics for Information Security
Click Here for more information.
CIS Information Security Metrics Service
Click Here for more information.

CIS MEMBER AND DEVELOPER UPDATE
Learn about NEW resources CIS is developing to help Members and the IT security community. Click Here to view or download the web cast.

CIS WEB EVENT:
CIS web event on Configuration Management - What Is It and How Do You Document It? in association with Baptie and Company. Click Here to register for the event.

CIS WEB EVENT ON PROTECTING INFORMATION
CIS web event archive on Protecting Information in association with the International Association of Privacy Professionals and sponsored by Computer Associates. Click Here to see the archive.

CIS BENCHMARK RELEASE
CIS recently released new or updated Benchmarks for the following systems: (1) HP-UX ; (2) Mac OSX - Leopard ; (3) Xen and (4) Red Hat Linux 5 (for RHEL 5). Click on each Benchmark for more information.

CIS RELATED PRESENTATIONS
Are you attending any of the upcoming SANS presentations that discuss the CIS Benchmarks and Audit Tools? Click Here for more information on these CIS Related events.