HomeInsightsBlog PostsCIS Benchmarks September 2026 Update

CIS Benchmarks September 2026 Update

CIS-Benchmarks

The following CIS Benchmarks were updated during the past month. We've highlighted the major updates below. Each Benchmark includes a full changelog detailing all modifications and enhancements.

CIS Benchmarks Updated Last Month

CIS Microsoft Windows Server 2022 Benchmark v5.1.0

We are excited to announce the publication of the updated CIS Microsoft Windows Server 2022 Benchmark v5.1.0. Our team has devoted significant time and effort to enhance the content of this Benchmark, ensuring it remains relevant and valuable to members.

Summary of changes in this latest version:

  •  Recommendations Updated
  • All Microsoft Defender Antivirus recommendations removed as Defender now has its own Benchmark
  • 1 Recommendation Removed
  • 18 Control Mappings Updated

The full changelog is included in the DOCX and PDF versions of the Benchmark.

Many thanks to the CIS Windows Community and Windows Team for making this Benchmark happen. Special thank to Haemish Edgerton and Aaron Margosis.

Download the CIS Microsoft Windows Server 2022 Benchmark v5.1.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Microsoft Windows 11 Enterprise Benchmark v5.1.0

We are excited to announce the publication of the updated CIS Microsoft Windows 11 Enterprise Benchmark v5.1.0.

Summary of changes in this latest version:

  • 3 Recommendations Updated
  • All Microsoft Defender Antivirus recommendations removed as Defender now has its own Benchmark
  • 1 Recommendation Removed
  • 18 Control Mappings Updated

The full changelog is included in the DOCX and PDF versions of the Benchmark.

Many thanks to the CIS Windows Community and Windows Team for making this Benchmark happen. Special thank to Haemish Edgerton and Aaron Margosis.

Download the CIS Microsoft Windows 11 Enterprise Benchmark v5.1.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Microsoft Windows Server 2025 Benchmark v2.1.0

We are excited to announce the publication of the updated CIS Microsoft Windows Server 2025 Benchmark v2.1.0.

Summary of changes in this latest version:

  • 7 Recommendations Updated
  • All Microsoft Defender Antivirus recommendations removed as Defender now has its own Benchmark
  • 1 Recommendation Removed
  • 18 Control Mappings Updated

The full changelog is included in the DOCX and PDF versions of the Benchmark.

Many thanks to the CIS Windows Community and Windows Team for making this Benchmark happen. Special thank to Haemish Edgerton and Aaron Margosis.

Download the CIS Microsoft Windows Server 2025 Benchmark v2.1.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Microsoft Windows Server 2025 Stand-alone Benchmark v2.0.0

We are excited to announce the publication of the updated CIS Microsoft Windows Server 2025 Stand-alone Benchmark v2.0.0.

Summary of changes in this latest version:

  • 8 Recommendations Added
  • 1 Recommendation Updated
  • 6 Recommendations Removed
  • 1 Recommendation Renamed
  • 18 Control Mappings Updated
  • All Microsoft Defender Antivirus recommendations removed as Defender now has its own Benchmark

The full changelog is included in the DOCX and PDF versions of the Benchmark.

Many thanks to the CIS Windows Community and Windows Team for making this Benchmark happen. Special thanks to Haemish Edgerton and Aaron Margosis.

Download the CIS Microsoft Windows Server 2025 Stand-alone Benchmark v2.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Apache Tomcat Application Server 9 STIG Benchmark v1.1.0

We are pleased to announce the publication of CIS Apache Tomcat Application Server 9 STIG Benchmark v1.1.0.

Download the CIS Apache Tomcat Application Server 9 STIG Benchmark v1.1.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Apache Tomcat 11 Benchmark v1.1.0

We are pleased to announce the publication of CIS Apache Tomcat 11 Benchmark v1.1.0.

Highlights include:

  • Audit and remediation sections updated to reflect improvements and enhancements to recommendations
  • Additional scans and automations created
  • Deprecated settings removed

Thanks to the community for all of the involvement, suggestions, and work put into making this benchmark the best it can be.

Download the CIS Apache Tomcat 11 Benchmark v1.1.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Apache Tomcat 10.1 Benchmark v1.2.0

We are pleased to announce the publication of CIS Apache Tomcat 10.1 Benchmark v1.2.0.

Highlights include:

  • Audit and remediation sections updated to reflect improvements and enhancements to recommendations
  • Additional scans and automations created
  • Deprecated settings removed

Thanks to the community for all of the involvement, suggestions, and work put into making this Benchmark the best it can be.

Download the CIS Apache Tomcat 10.1 Benchmark v1.2.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS PostgreSQL 17 Benchmark v2.0.0

We are excited to release the updated CIS PostgreSQL 17 Benchmark v2.0.0.

This version includes:

  • Updates to reflect version changes and ticket corrections
  • New recommendation requiring passwords for all accounts capable of login
  • Updated CIS Control mappings

The full changelog is included in the DOCX and PDF versions of the Benchmark.

A huge thank you to the CIS PostgreSQL Benchmark Community. Special thanks to Yorvi Arias.

Download the CIS PostgreSQL 17 Benchmark v2.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Google Chrome Group Policy Benchmark v1.1.0

We are excited to announce publication of the updated CIS Google Chrome Group Policy Benchmark v1.1.0.

Major milestones for this release:

  • Updated to align with Chrome v150
  • Additional Generative AI recommendations added
  • 20 recommendations added to enhance security guidance

A huge thanks to the CIS Google Chrome Community for making this happen.

Download the CIS Google Chrome Group Policy Benchmark v1.1.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Google Chrome Enterprise Core Browser Benchmark v1.1.0

We are excited to announce publication of the updated CIS Google Chrome Enterprise Core Browser Benchmark v1.1.0.

Major milestones for this release:

  • Updated to align with Chrome v150
  • Additional Generative AI recommendations added
  • 20 recommendations added to enhance security guidance

A huge thanks to the CIS Google Chrome Community for making this happen.

Download the CIS Google Chrome Enterprise Core Browser Benchmark v1.1.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Google ChromeOS Benchmark v1.2.0

We are excited to announce the updated CIS Google ChromeOS Benchmark v1.2.0.

Major milestones for this release:

  • Updated to align with ChromeOS v150
  • Additional Generative AI recommendations added
  • 20 recommendations added to enhance security guidance

Download the CIS Google ChromeOS Benchmark v1.2.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Google Workspace Foundations Benchmark v1.4.0

We are excited to announce the publication of the updated CIS Google Workspace Foundations Benchmark v1.4.0.

Highlights include:

  • Updated mappings to CIS Controls v7 and v8
  • Small bug fixes and clarifications

A huge thank you to the CIS Google Chrome and Google Workspace Communities.

Download the CIS Google Workspace Foundations Benchmark v1.4.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Apple macOS 15 Sequoia STIG Benchmark v1.1.0

We are excited to announce the new CIS Apple macOS 15 Sequoia STIG Benchmark v1.1.0.

Highlights include:

  • Adheres to guidance in the macOS 15 Sequoia STIG
  • Adds CIS-CAT assessment content for the macOS 15 STIG for the first time

Download the CIS Apple macOS 15 Sequoia STIG Benchmark v1.1.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Microsoft Windows 11 STIG Benchmark v1.2.0

We are pleased to announce the release of the CIS Microsoft Windows 11 STIG Benchmark v1.2.0.

This release updates the benchmark to align with Version 2, Release 6 of the Microsoft Windows 11 Secure Technical Implementation Guide (STIG).

Download the CIS Microsoft Windows 11 STIG Benchmark v1.2.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Debian 13 Linux Benchmark v1.1.0

We are pleased to announce the publication of the new CIS Debian 13 Linux Benchmark v1.1.0.

Highlights include:

Tickets Resolved

  • 116 tickets resolved

Added

  • 18 recommendations
  • 8 sections

Removed

  • 11 recommendations
  • 5 sections

Updated

  • 200 recommendations
  • 40 sections

Special thanks to the Linux Community and the Nix team.

Download the CIS Debian 13 Linux Benchmark v1.1.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS AlmaLinux OS 9 Benchmark v3.0.0

We are excited to announce the publication of the final update of CIS AlmaLinux OS 9 Benchmark v3.0.0.

Highlights include:

  • 92 recommendations added
  • 34 recommendations removed or restructured
    • 17 removed outright
    • 17 restructured into successor recommendations

Special thanks to the Linux Community and the Nix team.

Download the date of CIS AlmaLinux OS 9 Benchmark v3.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Oracle Linux 9 Benchmark v3.0.0

We are excited to announce the publication of the final update of CIS Oracle Linux 9 Benchmark v3.0.0.

Highlights include:

  • 92 recommendations added
  • 34 recommendations removed or restructured
    • 17 removed outright
    • 17 restructured into successor recommendations

Special thanks to the Linux Community and the Nix team.

Download the CIS Oracle Linux 9 Benchmark v3.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Red Hat Enterprise Linux 9 Benchmark v3.0.0

We are excited to announce the publication of the final update of CIS Red Hat Enterprise Linux 9 Benchmark v3.0.0.

Highlights include:

  • 92 recommendations added
  • 34 recommendations removed or restructured
    • 17 removed outright
    • 17 restructured into successor recommendations

Special thanks to the Linux Community and the Nix team.

Download the CIS Red Hat Enterprise Linux 9 Benchmark v3.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Rocky Linux 9 Benchmark v3.0.0

We are excited to announce the publication of the final update of CIS Rocky Linux 9 Benchmark v3.0.0.

Highlights include:

  • 92 recommendations added
  • 34 recommendations removed or restructured
    • 17 removed outright
    • 17 restructured into successor recommendations

Special thanks to the Linux Community and the Nix team.

Download the CIS Rocky Linux 9 Benchmark v3.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

New CIS Benchmarks Released Last Month

CIS Arista EOS Benchmark v1.0.0

We are pleased to announce the publication of CIS Arista EOS Benchmark v1.0.0.

Download the CIS Arista EOS Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Ubuntu Linux 26.04 LTS Benchmark v1.0.0

We are pleased to announce the publication of the new CIS Ubuntu Linux 26.04 LTS Benchmark v1.0.0.

Much work went into analyzing and expanding this benchmark.

Special thanks to the Linux Community and the Nix team for their contributions.

Download the CIS Ubuntu Linux 26.04 LTS Benchmark v1.0.0 in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

CIS Build Kits Released Last Month

  • CIS Microsoft Windows Server 2022 Benchmark v5.1.0
  • CIS Microsoft Windows 11 Enterprise Benchmark v5.1.0
  • CIS Microsoft Windows Server 2025 Benchmark v2.1.0
  • CIS Microsoft Windows Server 2025 Stand-alone Benchmark v2.0.0
  • CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0
  • CIS Apple macOS 15 Sequoia Benchmark v2.1.0
  • CIS Apple macOS 26 Tahoe Benchmark v1.1.0

Get Involved: Need Volunteers

Get involved by helping us develop content, review recommendations, and test CIS Benchmarks. Join a community today! We're looking for contributors for the following technologies:

Interested in the CIS Benchmark development process, how you can contribute, or how to get involved? Reach out to [email protected]. You can also learn more on the CIS Benchmarks Community page.

CIS Benchmarks That May Be Archived Without Community Volunteers

Due to a lack of Subject Matter Expert (SME) support, CIS plans to archive all versions of the following Benchmark families unless additional community support becomes available:

  • CIS Zoom Benchmarks
  • CIS Check Point Firewall Benchmarks
  • CIS Bottlerocket Benchmarks

If you are an SME and would like to assist, please contact the CIS Benchmark Development Team at [email protected].

 

Join a Community Today

As of June 23, 2025, the MS-ISAC has introduced a fee-based membership. Any potential reference to no-cost MS-ISAC services no longer applies.

Join a Community Today

Related Resources