Network Vulnerability Assessment

Using CIS benchmarks

CIS provides security benchmarks for various platforms such as servers, operating systems, mobile devices, browsers, and so on. There are two ways one can use CIS benchmarks:

• Individually download the benchmark for the required platform from https://www.cisecurity.org/cis-benchmarks/ and then manually verify the configuration as per the benchmark.
• Use an automated tool for assessing the target platform against the CIS benchmark, such as the CIS CAT tool. The CIS CAT tool can be obtained from https://learn.cisecurity.org/cis-cat-landing-page.

The free version of the CIS CAT tool supports the assessment of only a limited number of benchmarks, while the professional version allows assessment of all available CIS benchmarks. ...