CIS Benchmarks February 2021 Update

CIS-Benchmarks

CIS is excited to announce the release of the following CIS Benchmarks. These CIS Benchmark releases would not have been possible without the time and support of community contributors through the form of tickets, comments, and joining our community calls. Your contributions are invaluable to our consensus process and we thank you for volunteering.

CIS Google Workspace Foundations Benchmark v1.0.0

This is the initial release of prescriptive guidance for establishing a secure configuration posture for Google Workspace.

Special thanks to Wacey Lanier, SecureSky; and Iulia Ion, Google.

Download the CIS Google Workspace Foundations Benchmark PDF

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Microsoft Intune for Windows 10 Release 2004 Benchmark v1.0.0

This is the initial release of prescriptive guidance for establishing a secure configuration posture for Microsoft Intune for Windows.

Special thanks to William Ferguson, Jeff Hunt, Kai Markl, and Sergio Sarinana.

Download the CIS Microsoft Intune for Windows 10 Release 2004 Benchmark PDF

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Microsoft Windows 10 Enterprise Release 20H2 Benchmark v1.10.0

This document provides prescriptive guidance for establishing a secure configuration posture for Microsoft Windows 10. An overview of the changes:

  • Added three new security settings
  • Moved several sections due to updated ADMX templates
  • Updated two settings

The full change log is included at the end of the PDF.

Also, please note that the Excel version of the CIS Benchmark includes MITRE ATT&CK mappings along with CIS Controls Implementation Groups. This initial extension of our mappings can help identify various techniques to address attacks. If you have feedback on the mappings, please let us know at [email protected].

Special thanks to Haemish Edgerton and the Windows Community for their work on this update.

Download the CIS Microsoft Windows 10 Enterprise Release 20H2 Benchmark PDF

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS Microsoft Azure Foundations Benchmark v1.3.0

This CIS Benchmark provides prescriptive guidance for establishing a secure baseline configuration for Microsoft Azure. Changes in this update include:

  • Updated multiple recommendations for the change of Advanced Data Security to Azure Defender
  • New recommendations for additional Azure Defender bundles
  • Updated multiple activity log alert console remediation steps
  • Removal of multiple recommendations for features that have been deprecated
  • Updated reference links in multiple recommendations to the CIS Azure Security Benchmark

Special thanks to Microsoft Azure team and the editors and contributors for their time and effort to make this update possible.

Find the full list of changes in the change log in the PDF.

Download the CIS Microsoft Azure Foundations Benchmark PDF

CIS SecureSuite Members can visit CIS WorkBench to download other formats and related resources.

CIS_Benchmarks_Community

Get involved by helping us develop content, review recommendations, and test CIS Benchmarks. Join a community today! We’re looking for contributors for the following technologies where drafts are available for review:

Have questions about the CIS Benchmark development process and how to get involved? Reach out to us at [email protected]. You can also learn more on the CIS Benchmarks Community page.