Download the Benchmarks
FREE of CHARGE
The Security Configuration Benchmarks below are distributed
free of charge to propagate their worldwide use and adoption
as user originated, de facto standards.
The CIS Benchmarks are the ONLY consensus best practice security
configuration standards both developed and accepted by government,
business, industry, and academia.
The Benchmarks are:
- Recommended technical control rules/values for hardening
operating systems, middleware and software applications,
and network devices;
- Unique, because the recommendations are defined via
consensus among hundreds of security professionals worldwide;
- Downloaded approximately 1 million times per year;
- Distributed freely by CIS in .PDF format (some are available
to CIS Members only in XML format via the CIS Members web
site);
- Used by thousands of enterprises as the basis for security
configuration policies and the de facto standard against
which to compare them.
For more information about the benchmarks and tools:
