CIS Benchmarks May 2025 Update

CIS-Benchmarks

The following CIS Benchmarks® and CIS Build Kits have been updated or recently released. We've highlighted the major updates below. Each Benchmark and Build Kit includes a full changelog that references all changes.

CIS Benchmarks Updated Last Month

CIS Azure Kubernetes Service (AKS) Benchmark v1.7.0

This Benchmark includes support for Kubernetes clusters built on Kubernetes v1.28, v1.29, and v1.30. Some items of note for this update:

  • Added or enhanced over 30 recommendations
  • Improved the Automated Assessment Content (AAC)
  • Updated the Benchmark and recommendations to support Kubernetes v1.30

A huge thank you to the CIS Kubernetes Community for making this happen. Special thanks go to Rory McCune and Mark Larinde for their dedication to making this Benchmark the best it can be.

Download the CIS Kubernetes Benchmark in PDF.

CIS SecureSuite® Members can visit CIS WorkBench here to download other formats and related resources.

CIS Kubernetes Benchmark v1.11.1

Based on feedback from the CIS Kubernetes Community, we released a bug fix for this Benchmark.

Download the CIS Kubernetes Benchmark in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Microsoft Intune for Windows 10 Benchmark v4.0.0

Some items of note for this update:

  • Added 27 new security settings
  • Updated 26 settings
  • Removed 14 settings
  • Renamed 15 settings
  • Moved nine settings
  • Moved, added, and removed sections due to updated ADMX templates
  • Addressed over 100 other tickets in the Community

A huge thank you to the CIS Windows Community and Windows Team for making this Benchmark happen. Special thanks go to Phil Chatham, Martin Himken, Johannes Kristjansson, JJ Milner, and James Robinson.

Download the CIS Microsoft Intune for Microsoft Windows Benchmark in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Microsoft Intune for Windows 11 Benchmark v4.0.0

Some items of note for this update:

  • Added 53 new security settings
  • Updated 26 settings
  • Removed 22 settings
  • Renamed 16 settings
  • Moved eight settings
  • Moved, added, and removed sections due to updated ADMX templates
  • Addressed over 100 other tickets in the Community

A huge thank you to the CIS Intune Community and Intune Team for making this Benchmark happen. Special thanks go to Phil Chatham, Martin Himken, Johannes Kristjansson, JJ Milner, and James Robinson.

Download the CIS Microsoft Intune for Microsoft Windows Benchmark in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

New CIS Benchmarks Released Last Month

CIS Red Hat Enterprise Linux 9 STIG Benchmark v1.0.0

We are excited to announce the publication of this new technology version STIG Benchmark. Some items of note for this release:

  • Follows the revised approach for CIS STIG Benchmarks
  • Contains 452 STIG Rules with 86.5% capable of being assessed through AAC

A huge thank you to the Benchmark Development NIX Team for all their hard work in producing this Benchmark.

Download the CIS Red Hat Enterprise Linux Benchmark in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Build Kits Created Last Month

CIS Ubuntu Linux 20.04 LTS Benchmark v3.0.0

This Build Kit supports all profiles available in the Benchmark and will remediate the target accordingly. In testing against a default Ubuntu 20.04.6 LTS installation for the Level 2 Server profile, the Build Kit remediates more than 120 default settings that do not comply with the Benchmark guidance. A follow-up scan by CIS-CAT® Pro returns a PASS result over 90%.

Some items of note for this Build Kit:

  • Added several new scripts to support updated recommendations
  • Updated existing scripts for better execution

Download the CIS Ubuntu Linux Benchmark in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.


Get involved by helping us develop content, review recommendations, and test CIS Benchmarks. Join a community today!

If you're interested, please reach out to us at [email protected]. You can also learn more on the CIS Benchmarks Community page.