CIS Benchmarks March 2023 Update

CIS-Benchmarks

The following CIS Benchmarks have been updated or recently released. We've highlighted the major updates below. Each Benchmark includes a full changelog that references all changes.

Update to CIS Windows Server and Windows Workstation Benchmarks Maintenance

All CIS Windows Server and Windows Workstation Benchmarks will now be updated once a year to align with Microsoft’s update schedule. We will release major version updates (i.e., updating from v1.12.0 to v2.0.0) as appropriate to account for significant changes in the operating system. We encourage all Members to migrate to the latest versions. Please reach out to [email protected] with any questions you may have.

New CIS Firefox ESR 102 Benchmark v1.0.0 

This Benchmark provides prescriptive guidance for establishing a secure configuration posture for Firefox ESR 102.

Download the CIS Mozilla Firefox Benchmark in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

Updated CIS Microsoft Azure Foundations Benchmark v2.0.0

Here are some highlights of the update:

  • Audit and Remediation steps updated to match the current UI navigation and syntax
  • Expanded available Command Line Interface (CLI) commands for multiple recommendations
  • Restored CLI for Diagnostics recommendations
  • Updated language and branding for consistency

A huge thank you to the CIS Azure Community for making this happen. Special thanks go to Logan McMillan, Michael Born, Rachel Rice, Robert Burton, Jim Cheng, Zan Liffick, Nirbhay Kumar, Iben Rodriguez, Richard Rives, Luke Schultheis, and Jeffrey Lemmermann.

Download the CIS Microsoft Azure Benchmark in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

Updated CIS Google Container-Optimized OS Benchmark v1.1.0

Here are some highlights of the work that was done:

  • Added Stackdriver logging steps in multiple recommendations
  • Updated wording to clarify descriptions and rationales in various recommendations
  • Adjusted audit and remediation steps to match Console changes

Thank you to all the contributors for their time invested in updating this Benchmark.

Download the CIS Google Cloud Computing Platform Benchmark in PDF.

CIS SecureSuite Members can visit CIS WorkBench here to download other formats and related resources.

 

 


 

Get involved by helping us develop content, review recommendations, and test CIS Benchmarks. Join a community today! We're looking for contributors for the following technologies:


If you're interested, please reach out to us at [email protected]. You can also learn more on the CIS Benchmarks Community page.