Identifying which CIS Benchmarks are available & supported in Assessor

Problem

I would like to know if a CIS Benchmark is available for a specific product or platform, and whether this Benchmark is supported for automated assessments in CIS-CAT Pro Assessor.

Solution

For Benchmarks (manual assessments)

• Navigate to CIS WorkBench at https://workbench.cisecurity.org
  (an account can be created for free)
  
  

• Search for the desired application or operating system under the “Benchmarks” tab. A combination of keywords for the query may be required; using the below example, ubuntu 22.04 will not return a match, but ubuntu linux 22.04 will:

  Open

  

• Once the applicable Benchmark has been located, you can then browse each Recommendation category and item on the left, or select the “Files” button to download the Benchmark either as PDF (available to all users) or in Word / Excel format (SecureSuite Members only). If a Build Kit is available for this Benchmark, it will be listed under “Files” as well.

  Open

  

For CIS-CAT Pro Assessor (automated assessments, SecureSuite Members only)

• Review the Coverage Guide on the CIS-CAT Pro Assessor documentation page:
  https://ciscat-assessor.docs.cisecurity.org/en/latest/Coverage%20Guide/
  This document is continually updated to list all supported Benchmarks, operating systems & applications that the current release of Assessor is compatible with.
  
  

• Members can download CIS-CAT Pro Assessor from CIS WorkBench, which will always include the latest supported Benchmarks at the time of release:
  https://workbench.cisecurity.org/download/cis-cat/pro

Keywords; Assessor Benchmarks WorkBench

Content by Label