CIS Microsoft IIS Benchmarks

Home • Resources • Benchmarks • CIS Microsoft IIS Benchmarks

An objective, consensus-driven security guideline for the Microsoft IIS Server Software.

A step-by-step checklist to secure Microsoft IIS:

For Microsoft IIS 10 (CIS Microsoft IIS 10 Benchmark version 1.0.0)

CIS has worked with the community since 2009 to publish a benchmark for Microsoft IIS

Other CIS Benchmark versions:

For Microsoft IIS 10 (CIS Microsoft IIS 7 Benchmark version 1.7.1)

See the full list

Ticket • 18 Jun 2018

IIS 10 Benchmark update request for section 5.2

Discussion • 13 Jun 2018

IIS 10 and Benchmark 3.10

Ticket • 27 Apr 2018

Error when Running CIS tool for IIS 7.5

Ticket • 27 Apr 2018

#86 Determine if/how benchmark should prescribe framing-related policies

Center for Internet Security®