Product Name
CIS Build Kits®
Product Version
All versions
Date
Problem
Our Cloud Servers are not domain joined and the CIS Build Kits® cannot be pushed via GPO, can we still use the Build Kits?
Solution
CIS Windows Build Kits:
Our CIS Window’s Build Kits® are GPOs. The README.doc included in the CIS Windows Build Kits® states “Inside each Build Kit you will find folders containing broken out GPO settings… The Benchmarks are designed to support domain-joined enterprise systems; as such you will be importing the GPOs contained in the Build Kit into your group policy of your domain controller… Once imported, edit the GPOs accordingly before applying to any system. Once the GPOs are tailored to the organization’s needs and properly tested, begin rollout to a small group of systems.”
CIS Linux Build Kits:
The Build Kits for UNIX and LINUX environments are basic shell scripts that can be run from the machine or through another organizationally-approved tool.
PLEASE NOTE, reviewing the content within the corresponding Benchmark PDF is imperative for an overall successful application of the Build Kit, as there may be some settings that your organization needs to exempt itself from due to unique operational requirements.
Applying the Build Kit to a system without proper testing and review may result in a negative impact within your environment. In some cases, less than 100% of the CIS Benchmark will be applied; it is the responsibility and decision of each organization to determine which settings are applicable to their unique needs.