CIS Benchmarks November 2022 Update

CIS-Benchmarks

The following CIS Benchmarks have been updated or recently released. We've highlighted the major updates below. Each Benchmark includes a full changelog that references all changes.

A New CIS Build Kit is Out!

The CIS Amazon Linux 2 Benchmark Build Kit v2.0.0 is now available!

CIS SecureSuite Members can access it through CIS WorkBench.  

Three CIS Benchmarks Supporting Kubernetes 1.24

We are pleased to announce one new and two updated CIS Kubernetes Benchmarks that include support for Kubernetes 1.24. They are as follows: 

  • CIS Kubernetes V1.24 Benchmark v1.0.0
    • Updated guidance from the CIS Kubernetes V1.23 Benchmark, including an update for the eventRecord argument
  • CIS Azure Kubernetes Service (AKS) Benchmark v1.2.0
    • Changes to Managed Service Recommendation Section
    • Updates and improvements made to various recommendations
  • CIS Google Kubernetes Engine (GKE) Benchmark v1.3.0
    • Included a recommendation for cos_containerd
    • Modified Level 1 and Level 2 Profiles

A special thank you to Mark Larinde, Jow Bowbeer, the Microsoft team, the Google team, and the entire CIS Kubernetes Community for making these updates happen!

Download the CIS Kubernetes Benchmark in PDF.

CIS SecureSuite Members can visit CIS WorkBench herehere, and here, respectively, to download other formats and related resources.

Updates to CIS Apache Tomcat Benchmarks

We are happy to announce updates to two CIS Apache Tomcat Benchmarks covering the latest release of Tomcat 10.0.25 and 9.0.65. They are as follows:

  • CIS Apache Tomcat 10 Benchmark v1.0.0
  • CIS Apache Tomcat 9 Benchmark v1.2.0

Thanks to the entire CIS Tomcat Community who contributed their time and expertise toward these updates. Your contributions are invaluable to our consensus process! A special thank you goes out to Contributors Joern Krueger and Matt Reagan.

Download the CIS Apache Tomcat Benchmark in PDF.

CIS SecureSuite Members can visit CIS WorkBench here and here, respectively, to download other formats and related resources.

Updates to CIS IBM AIX Benchmarks

We are excited to announce the publication of the following updated IBM AIX Benchmarks:
  • CIS IBM AIX 7.1 Benchmark v2.1.0
  • CIS IBM AIX 7.2 Benchmark v1.0.0

A huge thank you to the CIS Linux Community for making this happen, and a special thank you to Author Michael Felt and Contributors Graham Eames and Xiaohan Qin!

Download the CIS IBM AIX Benchmark in PDF.

CIS SecureSuite Members can visit CIS WorkBench here and here, respectively, to download other formats and related resources.


CIS_Benchmarks_Community

Get involved by helping us develop content, review recommendations, and test CIS Benchmarks. Join a community today! We're looking for contributors for the following technologies:

If you're interested, please reach out to us at [email protected]. You can also learn more on the CIS Benchmarks Community page.