HomeInsightsBlog PostsCIS Benchmarks June 2026 Update

CIS Benchmarks June 2026 Update

CIS-Benchmarks

The following CIS Benchmarks and CIS Build Kits have been updated or recently released. We've highlighted the major updates below. Each Benchmark and Build Kit includes a full changelog that references all changes.

CIS Benchmarks Updated Last Month

CIS Amazon Linux 2 STIG v2.0.1

We are pleased to announce the release of the CIS Amazon Linux 2 STIG Benchmark v2.0.1.

This is a Final Release to mark the retirement of this Benchmark. There are no technical changes in this Benchmark other than the Flag that it has reached End of Life (EoL) and users should migrate to a covered opperating system.

Download the CIS Amazon Linux 2 STIG Benchmark v2.0.1 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Microsoft Intune for macOS 15.0 Sequoia Benchmark v1.1.0

We are excited to announce the final update of CIS Microsoft Intune for macOS 15.0 Sequoia Benchmark v1.1.0.

Major milestones for this release:

  • Updated guidance to mirror the existing CIS Apple macOS Benchmark
  • Added recommendations based on community input

A huge thanks to Lewis Hardy, the author of the Benchmark.

Download the CIS Microsoft Intune for macOS 15.0 Sequoia Benchmark v1.1.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Google Cloud Platform Foundations Benchmark v5.0.0

We are happy to announce the release of the CIS Google Cloud Platform Foundation Benchmark v5.0.0.

A lot of time has gone into reviewing and updating the content of this update. There are a number of updates included with this release.

Here are a few of the changes:

  • Added 10 new recommendations
  • Added New section for Google Organization Resources settings
  • Updated CIS Controls mappings
  • Updated multiple console step to reflect changes in the GUI

A change log detailing the changes made is included in the Doc and PDF versions of the Benchmark.

Thank you to all of the contributors that helped complete this process.

The Benchmark is available for download in the Files/Downloads section of WorkBench, here.

Download the CIS Google Cloud Platform Foundation Benchmark v5.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Cisco IOS Router NDM STIG Benchmark v1.1.0

We are pleased to announce the release of CIS Cisco IOS Router NDM STIG Benchmark v1.1.0.

Download the CIS Cisco IOS Router NDM STIG Benchmark v1.1.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Cisco IOS Switch RTR STIG Benchmark v1.1.0

We are pleased to announce the release of CIS Cisco IOS RTR Switch NDM STIG Benchmark v1.1.0.

Download the CIS Cisco IOS RTR Switch NDM STIG Benchmark v1.1.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Microsoft SQL Server 2022 Instance STIG Benchmark v1.0.0

We are excited to announce the release of the initial CIS Microsoft SQL Server 2022 Instance STIG Benchmark v1.0.0.

Download the CIS Microsoft SQL Server 2022 Instance STIG Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Microsoft 365 Foundations Benchmark v7.0.0

We are excited to announce that CIS Microsoft 365 Foundations Benchmark v7.0.0 has been published.

Here’s a quick overview of the key improvements we’ve made in this update:

  • This release includes 12 new recommendations relocated from the CIS Microsoft Azure Foundations Benchmark
  • Added 22 new recommendations
  • Removed 2 recommendations
  • Completed 68 updates
  • Revised control mappings
  • General grammar, formatting, spelling, and UI navigation improvements

Thank you to all team members who volunteered to contribute to this Benchmark. Special thanks to our community consensus group, whose biweekly reviews helped guide changes to these controls.

Download the CIS Microsoft 365 Foundations Benchmark v7.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Microsoft Windows Server 2019 Benchmark v5.0.0

Our team has devoted significant time and effort to enhance the content of this CIS Benchmark, ensuring it remains relevant and valuable to members.

 Here's a quick overview of the key improvements we've made in this update:

  • Added 2 new security settings
  • Updated 11 settings
  • Removed 14 settings
  • Renamed 1 setting
  • Moved, added, and removed sections due to updated ADMX templates

 A change log detailing the modifications made is included in the Word Doc and PDF versions of the Benchmark.

 A huge thank you to the CIS Windows Community and Windows Team for making this Benchmark happen. Special thanks to Haemish Edgerton and Aaron Margosis.

Download the CIS Microsoft Windows Server 2019 Benchmark v5.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Ubuntu Linux 24.04 LTS Benchmark v2.0.0

We are excited to announce the publication of CIS Ubuntu Linux 24.04 LTS Benchmark v2.0.0. A lot of effort has gone into analyzing and adding content to this Benchmark. Here are the highlights of the work completed:

Added

  • 122 Recommendations
  • 4 Sections

Dropped

  • 101 Recommendations
  • 11 Sections

Moved

  • 69 Recommendations
  • 4 Sections

Updated

  • 129 Recommendations
  • 16 Sections

A special thank you to the Linux Community and the Nix team; without their hard work, this Benchmark would not have been possible.

Download the CIS Ubuntu Linux 24.04 LTS Benchmark v2.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Kubernetes Benchmark v2.0.1

We're happy to announce the publication of CIS Kubernetes Benchmark v2.0.1.

This Benchmark includes support for Kubernetes clusters built on Kubernetes v1.34 & v1.35, and was updated to reflect the inclusion of support for these versions.

This Benchmark exemplifies the great things a community of users, vendors, and subject matter experts can accomplish through consensus collaboration. 

Download the CIS Kubernetes Benchmark v2.0.1 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Kubernetes STIG Benchmark v1.1.0

We are pleased to announce the publication of CIS Kubernetes STIG Benchmark v1.1.0.

This Benchmark includes support for Kubernetes clusters built on Kubernetes v1.34 & v1.35, and includes 53 audit and remediation enhancements and AAC support.

This Benchmark exemplifies the great things a community of users, vendors, and subject matter experts can accomplish through consensus collaboration. 

Download the CIS Kubernetes STIG Benchmark v1.1.0in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Debian Linux 12 Benchmark v2.0.0

We are excited to announce the publication of the final update of CIS Debian Linux 12 Benchmark v2.0.0. A lot of effort went into analyzing and adding content to this Benchmark. Here are some highlights of the work that was done:

Added

  • 122 Recommendations
  • 4 Sections

Dropped

  • 101 Recommendations
  • 11 Sections

Moved

  • 69 Recommendations
  • 4 Sections

Updated

  • 129 Recommendations
  • 16 Sections

A special thank you to the Linux Community and the Nix team; without their hard work, this Benchmark would not have been possible.

Download the CIS Debian Linux 12 Benchmark v2.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Azure Kubernetes Service (AKS) Benchmark v2.0.0

Announcing the publication of CIS Azure Kubernetes Service (AKS) Benchmark v2.0.0.

This Benchmark includes support for Kubernetes clusters built on Kubernetes v1.32, 1.33 & 1.34, and includes 40+ recommendations. The Benchmark and recommendations have been updated to support Kubernetes v1.34, and the AAC has been improved.

A huge thank you to the CIS Kubernetes Community for making this happen. Special thanks to Rory McCune and Mark Larinde for their dedication to making this CIS Benchmark the best it can be.

Download the CIS Azure Kubernetes Service (AKS) Benchmark v2.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Amazon Elastic Kubernetes Service (EKS) Benchmark v2.0.0

We're happy to announce the publication of CIS Amazon Elastic Kubernetes Service (EKS) Benchmark v2.0.0.

This Benchmark includes support for Kubernetes clusters built on Kubernetes v1.34 & v1.35 and includes 63 edited and enhanced recommendations plus 23 audit and remediation enhancements.

This Benchmark exemplifies the great things a community of users, vendors, and subject matter experts can accomplish through consensus collaboration. 

Download the CIS Amazon Elastic Kubernetes Service (EKS) Benchmark v2.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Benchmarks Updated Last Month

CIS Red Hat Enterprise Linux 10 STIG Benchmark v1.0.0

We are pleased to announce the release of the CIS Red Hat Enterprise Linux 10 STIG Benchmark v1.0.0.

This release includes Automated Assessment Content and coverage for the Red Hat Enterprise Linux 10 Secure Technical Implementation Guide (STIG) Version: 1 Release: 1 Benchmark.

Download the CIS Red Hat Enterprise Linux 10 STIG Benchmark v1.0.0. in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Microsoft Intune for macOS 26 Tahoe Benchmark v1.0.0

We are excited to announce the final update CIS Microsoft Intune for macOS 26 Tahoe Benchmark v1.0.0.

Major milestones for this release:

  • Updated guidance to mirror the existing CIS Apple macOS Benchmark
  • Added recommendations based on community input
  • Added declarative management for Software Updates

A huge thanks to Lewis Hardy, the author of the Benchmark.

Download the CIS Microsoft Intune for macOS 26 Tahoe Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS CockroachDB v25.x Benchmark v1.0.0

We are excited to announce the release of the new CIS CockroachDB v25.x Benchmark v1.0.0.

A huge thank you to the team from Cockroach Labs for the time they put in creating this Benchmark.

Download the CIS CockroachDB v25.x Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Oracle Linux 9 STIG Benchmark v1.0.0

We are pleased to announce the release of the CIS Oracle Linux 9 STIG Benchmark v1.0.0.

This release includes Automated Assessment Content and coverage for the Oracle Linux 9 Secure Technical Implementation Guide (STIG) Version: 1 Release: 5 Benchmark.

Download the CIS Oracle Linux 9 STIG Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Microsoft Intune for Microsoft Defender Antivirus Benchmark v1.0.0

We are excited to announce the publication of the new CIS Microsoft Intune for Microsoft Defender Antivirus Benchmark v1.0.0.

Our team has devoted significant time and effort to enhance the content of this Benchmark, ensuring it remains relevant and valuable to members. A huge thank you to the CIS Windows Community and Windows Team for making this Benchmark happen. Special thanks to Haemish Edgerton, Martin Himken, Johannes Kristjansson, and James Robinson.

Download the CIS Microsoft Intune for Microsoft Defender Antivirus Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Amazon Elastic Kubernetes Service (EKS) AUTOMODE Benchmark v1.0.0

We are please to announce the new CIS Amazon Elastic Kubernetes Service (EKS) AUTOMODE Benchmark v1.0.0 supporting the new EKS AutoMode.

Download the CIS Amazon Elastic Kubernetes Service (EKS) AUTOMODE Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS OceanBase Enterprise Edition V4 Benchmark v1.0.0

We are excited to announce the release of the new CIS OceanBase Enterprise Edition V4 Benchmark v1.0.0.

A huge thank you to the team from OceanBase for the time they put in creating this Benchmark.

Download the CIS OceanBase Enterprise Edition V4 Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

New CIS Build Kit Released Last Month

  • CIS Microsoft Intune for Defender Anti-Virus v1.0.0

Get involved by helping us develop content, review recommendations, and test CIS Benchmarks. Join a community today!

If you're interested, please reach out to us at [email protected]. You can also learn more on the CIS Benchmarks Community page.

 

 

Join a Community Today

As of June 23, 2025, the MS-ISAC has introduced a fee-based membership. Any potential reference to no-cost MS-ISAC services no longer applies.

Join a Community Today