x
Limited Time Offer: Save up to 20% on a new CIS SecureSuite Membership | Learn more
×
Why CIS Solutions Join CIS Resources
CIS WorkBench Sign-in CIS WorkBench Sign In CIS Hardened Images CIS Hardened Images Support CIS Support


Why CIS

Who We Are

CIS is an independent, nonprofit organization with a mission to create confidence in the connected world



About Us Leadership Principles Testimonials

Solutions

secure your organization
Secure Your Organization


secure specific platforms
Secure Specific Platforms


cis securesuite CIS SecureSuite® Learn More      Apply Now  
u s state local tribal and territorial governments
U.S. State, Local, Tribal & Territorial Governments


View All Products & Services  

Join CIS

Get Involved

Join CIS as a member, partner, or volunteer - or explore our career opportunities



CIS SecureSuite® Membership Multi-State ISAC (MS-ISAC®) Elections Infrastructure ISAC (EI-ISAC®) CIS CyberMarket® Vendors CIS Communities Careers

Resources

resources
Resources


learn
Learn


filter by topic
Filter by Topic


View All Resources  
CIS Logo Show Search Expand Menu

CIS Benchmarks August 2021 Update

CIS-Benchmarks

CIS Ubuntu Linux 20.04 LTS STIG Benchmark v1.0.0

This Benchmark offers prescriptive guidance for establishing a secure configuration posture for Ubuntu Linux 20.04 LTS systems running on x86 and x64 platforms. This guide was tested against Ubuntu Linux 20.04.2 LTS.

Download the Ubuntu Linux 20.04 STIG PDF

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Amazon Linux 2 Benchmark v2.0.0

This document was tested against Amazon Linux 2.

Thank you to everyone who contributed their time and expertise in the form of tickets, comments, and joining our editor calls. Your contributions are invaluable to our consensus process. Special thanks to Jon Christopherson and James Trigg - without your help, this Benchmark would not have been possible.

Download the Amazon Linux 2 PDF

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS VMware ESXi 7.0 Benchmark v1.1.0

This configuration guide was tested against VMware ESXi 7.0. Major items in this release include:

  • Removal of deprecated settings
  • Addition of the CIS Controls v8 mappings
  • Addition of the MITRE ATT&CK mappings

A huge thank you to the CIS VMware Community and Editor Team for making this happen! Special thanks to Dale McKay and Darren Freidel.

Download the VMware ESXi 7.0 PDF

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Oracle MySQL Enterprise Edition 8.0 Benchmark v1.1.0

This guide was tested against MySQL Enterprise Edition 8.0 running on Ubuntu Linux, but applies to other Linux distributions as well. Major items in this release include:

  • Addition of the CIS Controls v8 mappings
  • Addition of automated assessment content for CIS-CAT and other tools

A huge thank you to the CIS Oracle MySQL Community and Editor Team for making this happen, with special thanks to Mike Frank, Harin Vadodaria, and Oracle for their contributions to the Benchmark.

Download the Oracle MySQL Enterprise Edition 8.0 PDF

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Microsoft Windows 10 Enterprise Release 21H1 Benchmark v1.11.0

Some key changes to this Benchmark include:

  • Addition of one new security setting
  • Moved several sections due to updated ADMX templates
  • Updated three settings
  • Removed nine settings and one section (Microsoft Edge)

The full change log is included at the end of both the PDF and DOC versions for download.

Special thanks to Haemish Edgerton and a huge thank you to the CIS Windows Community and Editor Team for making this happen.

Download the Microsoft Windows 10 Enterprise Release 21H1 PDF

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Microsoft Windows Server 2016 Benchmark v1.3.0

Some key changes in this version of the Benchmark include:

  • Addition of four new security settings
  • Moved several sections due to updated ADMX templates
  • Updated three settings

The full change log is included at the end of both the PDF and DOC versions for download.

Special thanks to Haemish Edgerton and a huge thank you to the CIS Windows Community and Editor Team for making this happen.

Download the Microsoft Windows Server 2016 PDF

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Microsoft Windows Server 2016 STIG Benchmark v1.1.0

Here is a brief glimpse of the changes in this version of the Benchmark:

  • Updated two settings
  • Updated or added numerous STIG settings based on the latest release of the DoD STIG

The full change log is included at the end of both the PDF and DOC versions for download.

Download the Microsoft Windows Server 2016 STIG PDF

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

Get Involved: CIS Communities Need Volunteers

Get involved by helping us develop content, review recommendations, and test CIS Benchmarks. Join a community today! We're looking for contributors for the following technologies:

  • VMware ESXi
  • Microsoft 365
  • Mac iOS
  • IBM AIX
  • IBM DB2
  • MariaDB
  • Apache Cassandra/Hadoop/HTTP Server/Tomcat
  • BIND
  • F5
  • Microsoft Windows

Interesting in learning more about the CIS Benchmarks development process or how you can get involved? Reach out to us at benchmarkinfo@cisecurity.org. You can also learn more on the CIS Benchmarks Community page.

cis-securesuite-benchmarks-demo-webinar-banner-728x90