CIS Benchmarks Configuration Certification
CIS Benchmarks Configuration Certification validates that a system's configuration conforms to one of more with CIS Benchmark(s), assuring that a system’s performance will not be negatively impacted when product isthe product will operation as intended when running in a CIS hardened environment.
Why Get Certified CIS Benchmarks Configuration Certification
- Build Trust: Show customers your product meets globally recognized security standards.
- Market Advantage: Use the official CIS Benchmarks Certified Badge in your marketing.
- Stay Current: Demonstrate compliance with the latest CIS Benchmarks.
- Visibility: Get listed on the CIS website as a certified vendor.
In order to incorporate and market the CIS Benchmarks as part of a product offering, CIS Benchmarks Certification must be awarded to denote conformance of any tool or product that contains one or more CIS Benchmark in advance of any sale, distribution, or marketing.
CIS Benchmarks Configuration Certification Use Cases Include:
- Organization seeking certification to demonstrate that their solution operates as intended in a CIS hardened environment
- Organizations offering a solution configured to one or more CIS Benchmarks seeking independent validation of compatibility with CIS-recommended secure settings
- Organizations offering a solution configured to CIS Benchmark(s) for said vendor product/offering (i.e., CIS Hardened Images® , infrastructure, stack
- Product or device incorporating one or more CIS Benchmark recommendations as part of a secure-by-default deployment model
- Software, platform, or appliance that ships with CIS Benchmark-aligned configurations built in
- Vendor service that enables customers to deploy environments configured to applicable CIS Benchmarks
Steps to Submit
Please see the information and steps below for preparing product(s) for Certification.
The CIS SecureSuite Product Vendor Member SHALL NOT represent any of its product’s support/compliance for a given CIS Benchmark as “CIS Certification pending,” or similar verbiage.
- Each tool and certification type (Assessment, Remediation, Configuration) must be submitted once per year.
- Example: Tool A (Assessment + Remediation), Tool B (Assessment) = 3 submissions.
- Certification testing is limited to a single Benchmark per tool and certification type. Evidence for all integrated Benchmarks is not required.
- The annual submission will certify all Benchmarks identified for integration during your attestation process.
- Please note: certification only applies to actively supported Benchmarks. Archived Benchmarks are not available for certification.
