CIS Benchmarks

The CIS Benchmarks are the only consensus-based, best-practice security configuration guides both developed and accepted by government, business, industry, and academia.

The Benchmarks are:

Recommended technical control rules/values for hardening operating systems, middleware and software applications, and network devices;
Unique, because the recommendations are defined via consensus among hundreds of security professionals worldwide;
Downloaded several hundred thousand times per year;
Used by thousands of enterprises as the basis for security configuration policies and the de facto standard for IT configuration best practices.

Apache Benchmarks:

CIS_Apache_HTTP_Server_2.4_Benchmark_v1.2.11
CIS_Apache_Tomcat_Benchmark_v1.0.0

BIND Benchmark:

CIS_BIND_9.0-9.5_Benchmark_v2.0.0

CentOS & Debian Benchmarks:

CIS_CentOS_Linux_6_Benchmark_v1.1.0
CIS_CentOS_Linux_7_Benchmark_v1.1.0
CIS_Debian_Benchmark_v1.0

Microsoft IIS Benchmarks:

CIS_Microsoft_IIS_7_Benchmark_v1.6.0
CIS_Microsoft_IIS_8_Benchmark_v1.3.0

Microsoft SQL Server Benchmarks:

CIS_Microsoft_SQL_Server_2008_R2_Database_Engine_Benchmark_v1.2.0
CIS_Microsoft_SQL_Server_2012_Database_Engine_Benchmark_v1.1.0
CIS_Microsoft_SQL_Server_2014_Benchmark_v1.0.0

Microsoft Windows Client & Server OS Benchmarks:

CIS_Microsoft_Windows_7_Benchmark_v2.1.0
CIS_Microsoft_Windows_10_Benchmark_v1.1.0
CIS_Microsoft_Windows_Server_2012_Benchmark_v1.0.0
CIS_Microsoft_Windows_Server_2012_R2_Benchmark_v1.1.0