Become a CIS Member! Membership investment sustains CIS and the consensus process. Without it, CIS would not be able to develop, distribute and maintain the Benchmarks and Scoring Tools. What are the benefits of membership? Who should be a CIS Member? What are the different CIS Member categories and fees? Do colleges and universities pay discounted membership fees? Who are the current CIS Members? Membership registration form (HTML/Text document) Membership registration form (PDF document) For more information about membership, send a message to bmiuccio@cisecurity.org or call 717-534-1812. Benefits of Membership #1. The right to distribute the benchmarks and tools within your organization. (Category 5 Individual Members are not entitled to this benefit.) #2. Access to Benchmark Scoring Tools with specialized features available only to members. Click Here for more information. #3. Access to the CIS Members Web Site, including: Discussion forums; User groups; Development versions of new Benchmarks and Scoring Tools; Resources / download files not available the general user community. #4. Timely electronic notification of updates to the Benchmarks and Scoring Tools. #5. Enhanced Benchmark and Scoring Tool support from CIS staff and developers. Click Here for more information about user support. #6. Eligibility for CIS Security Software Certification. (Category 1 Members only are entitled to this benefit.) #7. Eligibility for licensing the commercial use of CIS resources. (Only Category 1 and 2 Members are entitled to this benefit. #8. An active role in the benchmark consensus process, participating with security specialists from organizations around the world in the definition of best practice standards for security configuration. #9. Visibility for your organization's tangible commitment to Internet security through its inclusion in the Roster of Members on the CIS website and promotional materials. #10. The right to use the CIS Membership Mark on your organization's website and documents, establishing its status as a leader formulating better security standards for systems connected to the Internet. Click Here to see the CIS Membership Mark. Few companies, government agencies or institutions have the expertise to develop thorough and effective security configuration policies for all their systems. Membership in CIS is an alternative to contracting with a consultant for that service, at a small fraction of the cost. For security specialists who have a wealth of configuration expertise, the Benchmarks are a widely-accepted standard against which to compare an organization's technical control policies. The Benchmarks are widely accepted by U.S. government agencies for FISMA compliance, and by auditors for compliance with the ISO standard as well as GLB, SOx, HIPAA, FIRPA and other the regulatory requirements for information security. Who should be a CIS Member? Users-Organizations that depend on secure and reliable cyber systems; Auditors who strive to verify the security of clients' automated information systems in a way that is consistent with their audit of other standards-based business processes; IT Consultants who help clients improve their system security configurations to levels that are widely accepted as prudent due care or best practice; Security Software Vendors who market commercially available tools that assess and report the conformity of system security configurations with the settings and actions defined in CIS benchmarks; ISPs, Web Hosting Companies, Business-to-Business e-Commerce Exchanges, and others who have a direct stake in minimizing their customers' risk of business disruptions and cyber crime; Insurance Companies that strive to minimize the underwriting risk associated with the information assets of the businesses which they insure; Network security specialists, firewall administrators, and others whose job it is to ensure the security, privacy, integrity, and availability of information assets under their custodial care; CIS is a not-for-profit consortium not tied to any proprietary product or service. Categories of Membership Category 1 - CIS Security Software Certification Membership ($20,000 annual membership fee) for security software vendors that use and market security software. Category 2 - IT Security Consultants and Auditors ($14,000 annual membership fee) for organizations that market security software and/or provide information security consulting or auditing services Category 3 - Large User-Organizations ($9,000 annual membership fee) for end-user organizations that have 100 or more employees Click Here for information about membership fees for colleges and universities. Category 4 - Small User-Organizations ($2,500 annual membership fee) for end-user organizations that have fewer than 100 employees Category 5 - Individuals ($300 annual membership fee) for an individual who is not affiliated with an organization, or whose organization does not reimburse him/her for the membership fee -- Individual Members are not permitted, by the Benchmark Terms of Use Agreement, to distribute the benchmarks and scoring tools within their organizations. All membership fees are for a one-year period beginning upon receipt of the member's application. To Become a Member Please print and complete this form, then fax it to 717-533-6847, or mail it with a check to: The Center for Internet Security P.O. Box 433 Hershey, PA 17033 Make your check payable to "The Center for Internet Security" Click here to open the registration form as an HTML/Text document. Click here to open the registration form as a .pdf file document.

© 2005, the Center for Internet Security.