Product Name
CIS Benchmarks
Product Version
All
Date
Problem
I would like the assessor to skip a check during an assessment,
Solution
To skip a check, the benchmark you are running must be tailored/customized.
To customize a benchmark follow the steps below:
1.) Find a CIS published benchmark within WorkBench. Either using the "Benchmarks" navigation link or within a given community.
2.) Click the Fork link of the left-sidebar.
3.) A modal will appear asking if you would like to customize the benchmark metadata before forking. This can easily be done after the fork completes as well.
Choosing customize will display the edit benchmark form, once submitted successfully, you'll be redirected to the forked benchmark.
Choosing just fork will take you to the forked benchmark.
4.) Depending on the size of the Benchmark, the resulting page may have a progress bar indicating the progress of the background job that is creating the fork. Once complete it will refresh the page on your new forked Benchmark.
5.) To run the assessment in CISCAT you will need to download the XCCDF and OVAL files and copy them to your CISCAT benchmarks/ folder.
There is more detail on Benchmark Customization as well as an instructional video here: https://workbench.cisecurity.org/support-center/pages/cis-benchmark-customization
Only certain benchmarks are available for customization. The list of supported tailoring benchmarks can be found here: https://workbench.cisecurity.org/support-center/pages/supported-tailoring-benchmarks
*You must be logged into WorkBench to view these pages*