How CIS-CAT Pro Aligns Your Security Best Practices Mappings

CIS-CAT Pro has two fundamental components: CIS-CAT Pro Assessor and CIS-CAT Pro Dashboard. Both can help you assess individual CIS Benchmarks as mapped to the CIS Critical Security Controls (CIS Controls).

Mapping CIS Benchmarks to the CIS Controls

CIS maps every CIS Benchmarks to the CIS Controls upon publishing. Within a particular Benchmark, you can see in the Recommendation section how it maps to a particular Control along with the Implementation Groups (IGs) and individual Safeguards. You can see this in the screenshot of the Recommendation section for CIS Microsoft Windows 11 Enterprise Benchmark v1.0.0 below.

How CIS-CAT Pro Aligns Your Security Best Practices Mappings CIS Controls inline image

Automated Scans Against the CIS Benchmarks

CIS-CAT Pro Assessor is a Java-based tool that scans against your target system’s configuration settings and shows you the system’s compliance to the corresponding CIS Benchmark. CIS-CAT Pro Assessor typically scans in just a few minutes, saving you hours of tedious manual configuration review. CIS-CAT Pro Assessor also offers multiple reporting formats, including an HTML report which lets you quickly review non-compliant settings and remediation steps for achieving compliance to the Benchmark recommendation.

Viewing CIS Benchmark Compliance Over Time

An integrated component to CIS-CAT Pro Assessor is CIS-CAT Pro Dashboard. This capability enables you to view system compliance to the CIS Benchmarks over a recent period of time with dynamic reporting features. CIS-CAT Pro Dashboard provides a real-time view into your ecosystem performance, displaying CIS-CAT result scoring for target systems in a visually-pleasing, easy-to-read graph format. You can then sort this data to view charts per CIS Benchmark or per device. You can also tag systems by department, for example, in order to view system grouping compliance to CIS Benchmarks over a recent period of time.

How to Start Using CIS-CAT Pro

CIS-CAT Pro Assessor and CIS-CAT Pro Dashboard are included in CIS SecureSuite Membership.

If you'd like to see CIS-CAT Pro in action, join an upcoming webinar.