Product Name
CIS Benchmarks
Product Version
All
Date
Problem
Info |
---|
I would like the assessor to skip a check during an assessment, . |
Solution
To skip a check, the benchmark you are running must be tailored/customized.
To customize a benchmark follow the steps below:
1.) Find a CIS published benchmark within WorkBench. Either using the "Benchmarks" navigation link or within a given community.
2.) Click the Fork link of the left-sidebarbutton in the top menu bar.
3.) A modal will appear asking if you would like to customize the benchmark metadata before forking. This can easily be done after the fork completes as well.
Choosing customize will display the edit benchmark form, once submitted successfully, you'll be redirected to the forked benchmark.
Choosing just fork will take you to the forked benchmark.
4.) Depending on the size of the Benchmark, the resulting page may have a progress bar indicating the progress of the background job that is creating the fork. Once complete it will refresh the page on your new forked Benchmark.
5.) In the left frame select the recommendation you want to skip
Click Edit in the top menu
Change the Assessment Status option from Automated to Manual
Click Submit
6.) To run the Tailored Benchmark assessment in CISCAT you will need to download the XCCF and OVAL files and copy them to your CISCAT benchmarks/ folder.Instructional video on how to customize a Benchmark: https://cisecurity.wistia.com/medias/oe666d764rin CIS-CAT Pro Assessor;
Click on Export in the top menu
Select XCCDF + OVAL
Download and unzip the files to you CIS-CAT Assessor Benchmarks folder
Run the assessment
Note |
---|
There is more detail on Benchmark Customization as well as an instructional video here: https://workbench.cisecurity.org/support-center/pages/cis-benchmark-customization |
Only certain benchmarks are available for customization. |
CIS Microsoft Windows 10 Enterprise Release 1709 Benchmark v1.4.0
CIS Microsoft Windows 10 Enterprise Release 1803 Benchmark v1.5.0
CIS Microsoft Windows Server 2016 RTM (Release 1607) Benchmark v1.1.0
CIS Microsoft IIS 10 Benchmark v1.1.0
CIS Amazon Linux 2 Benchmark v1.0.0
CIS Debian Linux 9 Benchmark v1.0.0
CIS Debian Linux 8 Benchmark v2.0.0
CIS RHEL 7 Benchmark v2.2.0.1
CIS CentOS 7 v2.2.0
Newer versions of these Benchmarks may work. An updated list is coming soon.
The list of supported tailoring benchmarks can be found here: https://workbench.cisecurity.org/support-center/pages/supported-tailoring-benchmarks *You must be logged into WorkBench to view these pages* |
Keywords - skip check recommendation assessment customize tailor fork
Page Properties | ||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||||||||
|