How does CIS harden the images which are available on the cloud platforms?

Product Name

CIS Hardened Images^® (AWS)

CIS Hardened Images^® (Azure)

CIS Hardened Images^® (Google Cloud Platform)

CIS Hardened Images^® (Oracle)

Product Version

all

Date

Jul 23, 2020

Answer

We build our images from the vendor supplied operating system images on the Cloud Service Provider

Our CIS Hardened Images are hardened according to the associated CIS Benchmark. You can download the benchmark PDF for free on our website here: https://www.cisecurity.org/cis-benchmarks/

The hardening is verified by using the CIS-CAT Pro Assessor and you can see the results of that assessment for your instance in /home/CIS_Hardened_Reports/ OR C:\CIS Hardening Reports\

We release our UNIX and Windows images monthly with updated vendor operating system patches. The images are also updated if there are changes in the associated CIS Benchmark.

For more information regarding CIS Hardened Images, please review the FAQ on our website here: https://www.cisecurity.org/cis-hardened-images/cis-hardened-images-faq/