The CIS Benchmarks that put Control 4 secure configuration into practice: what they are, Level 1, Level 2 and STIG profiles, CIS-CAT scanning, CIS Hardened Images, cloud Benchmarks and open-source tools that check them.
What the CIS Benchmarks are, how the consensus process produces them, which technologies they cover, what is free and what needs SecureSuite, how often they change, which standards recognize them and how they relate to Safeguard 4.1.
How to choose a CIS Benchmark profile: what Level 1 and Level 2 each aim for, the operational risk of Level 2, the STIG profile that replaced Level 3, testing before rollout and recording deviations in the secure configuration process.
The difference between the free CIS-CAT Lite and CIS-CAT Pro: Benchmarks covered, tailored content, reports mapped to the CIS Controls, the SecureSuite membership Pro requires and what membership costs by headcount.
What CIS Hardened Images are, where they are sold, STIG-hardened variants, which standards recognize their configuration, the reseller program for MSPs, and how they fit a secure configuration process for cloud servers.
How CIS Benchmarks relate to DISA STIGs: the STIG profile inside CIS Benchmarks, the separate CIS STIG Benchmarks and STIG Hardened Images, and how the recognition of each differs for federal and commercial buyers.
Open-source and free ways to check systems against CIS Benchmarks and secure configuration baselines: Wazuh SCA policies, OpenSCAP, Fleet and Kyverno policy reports, and the free CIS-CAT Lite, with what each reports.
The CIS Benchmarks for Amazon Web Services: the AWS Foundations Benchmark and service-level Benchmarks with current versions, free use terms, Level profiles, hardened images on AWS Marketplace and the Cloud Companion Guide.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.