HomeInsightsBlog PostsCIS Benchmarks November 2026 Update

CIS Benchmarks November 2026 Update

CIS Benchmarks

CIS-Benchmarks

The following CIS Benchmarks were updated during the past month. We've highlighted the major updates below. Each Benchmark includes a full changelog detailing all modifications and enhancements.

CIS Benchmarks Updated Last Month

CIS Microsoft Windows 10 Stand-alone Benchmark v5.0.0

We are excited to announce the publication of the updated CIS Microsoft Windows 10 Stand-alone Benchmark v5.0.0.

Summary of changes in this latest version:

  • 2 recommendations added
  • 16 recommendations updated
  • 15 recommendations removed
  • 1 recommendation renamed
  • 18 CIS Controls mappings updated
  • All Microsoft Defender Antivirus recommendations removed, as Microsoft Defender now has its own Benchmark

The full changelog is included in the DOCX and PDF versions of the Benchmark.

Many thanks to the CIS Windows Community and Windows Team for making this Benchmark happen. Special thanks to Haemish Edgerton and Aaron Margosis.

Download the CIS Microsoft Windows 10 Stand-alone Benchmark v5.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Microsoft Windows Server 2019 Stand-alone Benchmark v4.0.0

We are excited to announce the publication of the updated CIS Microsoft Windows Server 2019 Stand-alone Benchmark v4.0.0.

Summary of changes in this latest version:

  • 2 recommendations added
  • 13 recommendations updated
  • 11 recommendations removed
  • 1 recommendation renamed
  • 18 CIS Controls mappings updated
  • All Microsoft Defender Antivirus recommendations removed, as Microsoft Defender now has its own Benchmark

The full changelog is included in the DOCX and PDF versions of the Benchmark.

Many thanks to the CIS Windows Community and Windows Team for making this Benchmark happen. Special thanks to Haemish Edgerton and Aaron Margosis.

Download the CIS Microsoft Windows Server 2019 Stand-alone Benchmark v4.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Microsoft Edge Benchmark v5.0.0

We are excited to announce the publication of the updated CIS Microsoft Edge Benchmark v5.0.0.

Summary of changes in this latest version:

  • 14 recommendations added
  • 1 recommendation updated
  • 6 recommendations removed
  • 73 CIS Controls mappings updated

The full changelog is included in the DOCX and PDF versions of the Benchmark.

Many thanks to the CIS Microsoft Web Browser Community for making this Benchmark happen. Special thanks to Haemish Edgerton and Joe Goerlich.

Download the CIS Microsoft Edge Benchmark v5.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Microsoft Office Enterprise Benchmark v2.0.0

We are excited to announce the publication of the updated CIS Microsoft Office Enterprise Benchmark v2.0.0.

Summary of changes in this latest version:

  • 2 recommendations added
  • 19 recommendations updated
  • 3 recommendations removed
  • More than 100 CIS Controls mappings updated

The full changelog is included in the DOCX and PDF versions of the Benchmark.

Special thanks to Patricia Bravo Martin and Haemish Edgerton.

Download the CIS Microsoft Office Enterprise Benchmark v2.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Docker Benchmark v1.9.0

We are pleased to announce the publication of the updated CIS Docker Benchmark v1.9.0. This Benchmark supports Docker v29.x.

Highlights of this release include:

  • Benchmark reviewed and updated to support Docker v29.x
  • Automated recommendations reviewed and updated for Docker v29.x

Thank you to the Docker community for helping improve this Benchmark. Special thanks to the students at Shanghai Jiao Tong University.

Download the CIS Docker Benchmark v1.9.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Kubernetes Benchmark v2.1.0

We are pleased to announce the publication of the updated CIS Kubernetes Benchmark v2.1.0.

Key enhancements include:

  • Improved Automated Assessment Content (AAC)
  • Support for Kubernetes versions 1.36 and 1.37
  • Updated audit and remediation procedures for 21 recommendations

Thank you to the Kubernetes community for helping advance this Benchmark. Special thanks to Rory McCune, Joe Bowbeer, Mark Larinde, and Matt Reagan.

Download the CIS Kubernetes Benchmark v2.1.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS AWS Foundations Benchmark v7.1.0

We are pleased to announce the release of CIS AWS Foundations Benchmark v7.1.0.

Highlights of this release include:

  • Expanded AWS Organizations and IAM coverage
  • Enhanced access and credential management guidance
  • New section dedicated to AWS Bedrock security and governance

Thank you to the AWS community for its support and contributions.

Download the CIS AWS Foundations Benchmark v7.1.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Azure Kubernetes Service (AKS) Benchmark v2.1.0

We are pleased to announce the publication of the updated CIS Azure Kubernetes Service (AKS) Benchmark v2.1.0.

Highlights of this release include:

  • More than 30 automated recommendations

Thank you to the CIS Kubernetes Community for helping make this Benchmark possible. Special thanks to Mark Larinde for his dedication and contributions.

Download the CIS Azure Kubernetes Service (AKS) Benchmark v2.1.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS PostgreSQL 13 Benchmark v1.4.0

We are pleased to announce the final release of CIS PostgreSQL 13 Benchmark v1.4.0.

As PostgreSQL 13 has reached end of life, CIS encourages users to migrate to a supported PostgreSQL version and corresponding CIS Benchmark.

Highlights of this final release include:

  • Updated CIS Controls v7 and v8 mappings across all 72 recommendations
  • Enhanced TLS guidance for encrypted connections and cipher configuration
  • Improved audit and remediation procedures
  • Expanded guidance for login roles using non-password authentication methods

Special thanks to Torvi Arias.

Download the CIS PostgreSQL 13 Benchmark v1.4.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Microsoft Windows Server 2022 STIG Benchmark v4.0.0

We are pleased to announce the release of the updated CIS Microsoft Windows Server 2022 STIG Benchmark v4.0.0.

Summary of changes in this latest version:

  • 5 STIG rules added
  • 2 STIG rules removed

This release includes Automated Assessment Content and Build Kit coverage for Microsoft Windows Server 2022 STIG Version 2 Release 10.

Download the CIS Microsoft Windows Server 2022 STIG Benchmark v4.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS NGINX Benchmark v3.1.0

We are pleased to announce the publication of the updated CIS NGINX Benchmark v3.1.0.

Highlights of this release include:

  • Updated audit and remediation procedures for legacy settings
  • Updated CIS Controls mappings and added NIST 800-53r5 and CSF 2.0 references
  • Full changelog included in the DOCX and PDF versions

Many thanks to Stephan Wenderlich for helping make this Benchmark possible.

Download the CIS NGINX Benchmark v3.1.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS NGINX Benchmark v3.1.0 (DEU/GER)

We are pleased to announce the initial release of the German version of CIS NGINX Benchmark v3.1.0 (DEU/GER).

Highlights of this release include:

  • Updated CIS Controls mappings and added NIST 800-53r5 and CSF 2.0 references

Many thanks to Stephan Wenderlich for helping make this Benchmark possible.

Download the CIS NGINX Benchmark v3.1.0 (DEU/GER) in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

New CIS Benchmarks Released Last Month

CIS VMware ESXi 9.0 Benchmark v1.0.0

We are excited to announce the publication of CIS VMware ESXi 9.0 Benchmark v1.0.0.

Highlights include:

  • New Benchmark supporting VMware ESXi 9
  • Audited and remediated against the latest VMware ESXi 9 release

A huge thank you to the CIS VMware Community. Special thanks to Robert Plankers, Greg Carpenter, Matthew Reagan, and Tony Wilwerding.

Download the CIS VMware ESXi 9.0 Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Azure Kubernetes Service (AKS) Automatic Benchmark v1.0.0

We are pleased to announce the publication of the new CIS Azure Kubernetes Service (AKS) Automatic Benchmark v1.0.0.

Highlights include:

  • More than 30 automated recommendations
  • Support for AKS Automatic operating mode
  • Support for Kubernetes v1.36

Download the CIS Azure Kubernetes Service (AKS) Automatic Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS FortiSwitch Benchmark v1.0.0

We are pleased to announce the publication of the new CIS FortiSwitch Benchmark v1.0.0.

Special thanks to Jonathan White and the community contributors who helped develop this Benchmark.

Download the CIS FortiSwitch Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Cisco IOS XE Benchmark v1.0.0

We are pleased to announce the publication of the new CIS Cisco IOS XE Benchmark v1.0.0.

This Benchmark combines Cisco IOS 16 and 17 guidance into a comprehensive benchmark for IOS XE environments.

Download the CIS Cisco IOS XE Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0

We are pleased to announce the publication of the new CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0.

Special thanks to Yang Yang and Zhao Zhao for their contributions.

Download the CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Azure Container Linux Benchmark v1.0.0

We are excited to announce the publication of the CIS Azure Container Linux Benchmark v1.0.0.

Download the CIS Azure Container Linux Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Microsoft Windows Server 2025 STIG Benchmark v1.0.0

We are pleased to announce the publication of the new CIS Microsoft Windows Server 2025 STIG Benchmark v1.0.0.

This release includes Automated Assessment Content and Build Kit coverage for Microsoft Windows Server 2025 STIG Version 1 Release 3.

Download the CIS Microsoft Windows Server 2025 STIG Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Build Kits Released Last Month

  • CIS Microsoft Windows 10 Stand-alone Benchmark v5.0.0
  • CIS Microsoft Windows Server 2019 Stand-alone Benchmark v4.0.0
  • CIS Microsoft Office Enterprise Benchmark v2.0.0
  • CIS Microsoft Edge Benchmark v5.0.0
  • CIS AlmaLinux OS 9 Benchmark v3.0.0
  • CIS Oracle Linux 9 Benchmark v3.0.0
  • CIS Red Hat Enterprise Linux 9 Benchmark v3.0.0
  • CIS Rocky Linux 9 Benchmark v3.0.0
  • CIS Ubuntu Linux 26.04 LTS Benchmark v1.0.0
  • CIS Microsoft Windows Server 2025 STIG Benchmark v1.0.0
  • CIS Microsoft Windows Server 2022 STIG Benchmark v4.0.0
  • CIS Debian Linux 13 Benchmark v1.1.0

Help shape future CIS Benchmarks by contributing content, reviewing recommendations, and testing CIS Benchmarks. Join a community today. We are currently seeking contributors for the following technologies:

Interested in learning more about the CIS Benchmark development process, contributing content, or joining a Benchmark community? Reach out to [email protected] or visit the CIS Benchmarks Community page to get involved.

 

Join a Community Today

As of June 23, 2025, the MS-ISAC has introduced a fee-based membership. Any potential reference to no-cost MS-ISAC services no longer applies.

Join a Community Today

Related Resources