Center for Internet Security - Exchange Server 2003 and Exchange Server 2007 Benchmark

CIS Level 1 Benchmarks for Exchange Server 2003 and 2007	- Click Here to Download Them - FAQ - The Benchmarks
December 2007: The Exchange Server 2003 (v1.0) and Exchange Server 2007 Benchmarks (v1.0) are now available!
The Download Files Include:
CIS_Exchange2003_Benchmark_v1.0.pdf - the Benchmark document contains detailed instructions for implementing the steps necessary to harden a Exchange Server 2003 installation. CIS_Benchmark_Exchange2007_1.0.pdf - the Benchmark document contains detailed instructions for implementing the steps necessary to harden a Exchange Server 2007 installation. NOTE: There is currently no tool available for the Exchange 2003 or 2007 Benchmarks.
What are the Benchmarks?
The Benchmarks are a compilation of security configuration actions and settings that "harden" an Exchange Server 2003 or 2007 system. They recommend Level 1 Benchmark guidance, representing the prudent level of minimum due care for operating system security. Level 1 Benchmark settings/actions: Can be understood and performed by system administrators with any level of security knowledge and experience; Are unlikely to cause an interruption of service to the operating system or the applications that run on it; and Can be automatically monitored either by CIS Scoring Tools or by CIS Certified tools available from security software vendors. CLICK HERE for a roster of commercially available CIS-certified software tools.
Share Your Feedback
We value your feedback, which may be used to update and further define the Exchange Server 2003 or 2007 Benchmark's security configuration recommendations. Please direct your technical feedback to: The CIS Feedback Email Address Please direct other feedback to: Bert Miuccio, Vice President For more information about the CIS consensus process and the benchmarks, go to What are the Benchmarks? and FAQ - The Benchmarks.
Updates to the Benchmark
The CIS Level 1 Benchmarks for Exchange Server are updated periodically. Continuous feedback from CIS Members and other users assures that the consensus standard of minimum due care is always reflected in the recommended settings. Revision histories can be found in the benchmark documents. One of the benefits of CIS Membership is electronic notification when updates become available. Click Here for more information about membership. If your organization is not a member of the Center, visit this website periodically to assure that you are using the latest version of the Exchange Server Benchmarks. Click Here to see what Members say about The Center for Internet Security. DOWNLOAD the CIS Level 1 Benchmark for Exchange Server 2003 or Exchange Server 2007