Center for Internet Security

The Center for Internet Security (CIS) is a non-profit enterprise that helps organizations reduce the risk of business and e-commerce disruptions resulting from inadequate technical security controls. CIS provides enterprises with consensus best practice standards for security configurations, as well as resources for measuring information security status and for making rational decisions about security investments.

Benchmarks

Download FREE OF CHARGE from this website 52 best practice Benchmarks for security configuration of operating systems, applications, and devices.
Learn more about CIS Benchmarks.

Benchmark Audit Tools

CIS Benchmark Audit Tools enable IT and security professionals to rapidly assess their own IT systems for compliance with Benchmarks and security best practices. The CIS-CAT Benchmark Audit Tool is available to CIS Members. Other Audit Tools are available to both members and the public.

Metrics

Download FREE OF CHARGE from this website 21 metric definitions for collecting, analyzing and reporting IT security process and performance outcomes.
Learn more about CIS Metrics.

Your Participation

All IT and security professionals with subject matter expertise on CIS projects are invited to participate in the development of CIS Benchmarks and Metrics. CIS collaboration and consensus projects are open to the public.
Learn how to participate.