Securing Microsoft IIS

An objective, consensus-driven security guideline for the Microsoft IIS Server Software.

A step-by-step checklist to secure Microsoft IIS:

Download Latest CIS Benchmark Free to Everyone
For Microsoft IIS 10 (CIS Microsoft IIS 10 Benchmark version 1.2.0)

CIS has worked with the community since 2009 to publish a benchmark for Microsoft IIS.

Other CIS Benchmark versions:

For Microsoft IIS (CIS Microsoft IIS 10 Benchmark version 1.1.1)
Complete CIS Benchmark Archive

CIS Covers Other Server Technologies

See the full list