Product Name
CIS Benchmark™
Product Version
all
Date
Problem
I would like to know if a CIS Benchmark is available for a specific product or platform, and whether this Benchmark is supported for automated assessments in CIS-CAT Pro Assessor.
Solution
For Benchmarks (manual assessments)
Navigate to CIS WorkBench at https://workbench.cisecurity.org
(an account can be created for free)Search for the desired application or operating system under the “Benchmarks” tab. A combination of keywords for the query may be required; using the below example,
ubuntu 22.04
will not return a match, butubuntu linux 22.04
will:
The %
character can be used as wildcard in the Search dialog, ex.:ubuntu % 22.04
Once the desired Benchmark has been located, you can then browse each Recommendation category & item on the left, or select the “Files” button to download the Benchmark either as PDF (available to all users) or in Word / Excel format (SecureSuite Members only). If a Build Kit is available for this Benchmark, it will be listed under “Files” as well.
For CIS-CAT Pro Assessor (automated assessments, SecureSuite Members only)
Review the Coverage Guide on the CIS-CAT Pro Assessor documentation page:
https://ccpa-docs.readthedocs.io/en/latest/Configuration%20Guide/
This document is continually updated to list all supported Benchmarks, operating systems & applications that the current release of Assessor is compatible with.Members can download CIS-CAT Pro Assessor from CIS WorkBench, which will always include the latest supported Benchmarks at the time of release:
https://workbench.cisecurity.org/download/cis-cat/pro
If a Benchmark is not listed in the Coverage Guide, it is not yet supported by CIS-CAT Pro Assessor. If you or your organization would like to express interest in an available Benchmark being included in Assessor, please raise a Feature Enhancement Request ticket.
Feature Enhancement Requests are used by our development teams to gather Member feedback, and apply them to roadmaps for future CIS product releases and capabilities.
Add Comment