Limited Time Offer: Save up to 20% on a new CIS SecureSuite Membership | Learn more
Why CIS Solutions Join CIS Resources
CIS WorkBench Sign-in CIS WorkBench Sign In CIS Hardened Images CIS Hardened Images Support CIS Support


Who We Are

CIS is an independent, nonprofit organization with a mission to create confidence in the connected world

About Us Leadership Principles Testimonials


secure your organization
Secure Your Organization

secure specific platforms
Secure Specific Platforms

cis securesuite CIS SecureSuite® Learn More      Apply Now  
u s state local tribal and territorial governments
U.S. State, Local, Tribal & Territorial Governments

View All Products & Services  

Join CIS

Get Involved

Join CIS as a member, partner, or volunteer - or explore our career opportunities

CIS SecureSuite® Membership Multi-State ISAC (MS-ISAC®) Elections Infrastructure ISAC (EI-ISAC®) CIS CyberMarket® Vendors CIS Communities Careers




filter by topic
Filter by Topic

View All Resources  
CIS Logo Show Search Expand Menu

CIS Benchmarks July 2021 Update


This month's list may be short, but it is mighty! These CIS Benchmark releases would not have been possible without the time and support of community contributors through the form of tickets, comments, and joining our community calls. Your contributions are invaluable to our consensus process. Thank you to all who volunteered!

CIS Microsoft 365 Foundations Benchmark v1.3.0

Prescriptive guidance for establishing a secure configuration posture for Microsoft 365 running on any operating system (OS). This guide was tested against Microsoft 365, and includes recommendations for Exchange Online, SharePoint Online, OneDrive for Business, Skype/Teams, Azure Active Directory, and Intune. Major changes in the Benchmark include:

  • Updated mapping to CIS Controls v8
  • New recommendations for Teams, Forms, and Sway
  • Updated PowerShell for Exchange

The full changelog is included at the end of both the PDF and DOC versions of the Benchmark. Thanks to the entire CIS Microsoft 365 Community for help on this Benchmark. Special thanks to Viktor Gazdag, Richard Handley, and Jason Inks.

Download the CIS Microsoft 365 Benchmark PDF

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Apple macOS 10.14 v1.4.0, Apple macOS 10.15 v1.4.0, and Apple macOS 11.0 v1.2.0 Benchmarks

CIS Apple macOS Benchmarks were tested against respective Apple macOS versions. Major changes in these Benchmarks include:

  • Updated mapping to CIS Controls v8
  • Added automated scoring for recommendations that were previously manual checks with updated audits and remediations
  • Moved several recommendations in the Appendix sections into full recommendations
  • Removed recommendations from the Appendix that no longer were applicable
  • Significant grammatical updates throughout the benchmarks

The full changelog is included at the end of both the PDF and DOC versions of the Benchmarks. Thanks to the entire CIS Apple macOS Community for help developing these Benchmarks. Special thanks to Ron Colvin (Author), William Harrison, Mark Andersen, Hao Shu, Jeffrey Compton, and Laura Gardner.

Download the CIS Apple macOS Benchmark PDFs

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.


Get involved by helping us develop content, review recommendations, and test CIS Benchmarks. Join a community today! We're looking for contributors for the following technologies:

Have questions about the CIS Benchmark development process, how you can contribute, or how to get involved? Reach out to us at benchmarkinfo@cisecurity.org. You can also learn more on the CIS Benchmarks Community page.