CIS Announces November 2026 Updates to Security Benchmarks
Summary
CIS announced benchmark updates for Windows, Edge, Docker, Kubernetes, AWS, PostgreSQL and other platforms, alongside new benchmarks and build kits. Changes include revised recommendations, assessment content and support for newer platform versions.
Key points
- CIS lists updates to benchmarks covering Windows, Edge, Office, Docker, Kubernetes, AWS, AKS, PostgreSQL, NGINX and other platforms.
- The Windows 10 benchmark v5.0.0 adds two recommendations, updates 16 and removes 15; Microsoft Defender Antivirus recommendations were removed because it now has its own benchmark.
- The Docker benchmark v1.9.0 updates guidance and automated recommendations for Docker v29.x.
- The Kubernetes benchmark v2.1.0 adds support for Kubernetes 1.36 and 1.37 and updates audit and remediation procedures for 21 recommendations.
- The AWS Foundations benchmark v7.1.0 expands AWS Organizations and IAM coverage and adds a section on AWS Bedrock security and governance.
- The final PostgreSQL 13 benchmark release updates TLS guidance and audit procedures; CIS recommends migrating because PostgreSQL 13 has reached end of life.
- New benchmarks include VMware ESXi 9.0, Cisco IOS XE and Windows Server 2025 STIG; CIS also released build kits for several Linux distributions.
Article Details
- Event Type
- Release and update of CIS security benchmarks and build kits
- Impact
- CIS published updated benchmarks with revised security recommendations, automated assessments, audit and remediation procedures, and control mappings across operating systems, browsers, cloud platforms, containers, databases, and other technologies. The PostgreSQL 13 benchmark release is final because PostgreSQL 13 has reached end of life; CIS encourages users to migrate to a supported version.
People
Aaron MargosisRecognized for contributions to the CIS Microsoft Windows 10 benchmark.Haemish EdgertonCredited for contributions to the CIS Microsoft Windows 10, Microsoft Edge, and Microsoft Office Enterprise benchmarks.Joe BowbeerRecognized for contributions to the CIS Kubernetes benchmark.Joe GoerlichRecognized for contributions to the CIS Microsoft Edge benchmark.Mark LarindeRecognized for contributions to the CIS Kubernetes and Azure Kubernetes Service (AKS) benchmarks.Matt ReaganRecognized for contributions to the CIS Kubernetes benchmark.Patricia Bravo MartinRecognized for contributions to the CIS Microsoft Office Enterprise benchmark.Rory McCuneRecognized for contributions to the CIS Kubernetes benchmark.Stephan WenderlichRecognized for helping develop the CIS NGINX benchmark.Torvi AriasRecognized for contributions to the CIS PostgreSQL 13 benchmark.
Products
AWSCIS AWS Foundations Benchmark v7.1.0Azure Kubernetes ServiceCIS Azure Kubernetes Service (AKS) Benchmark v2.1.0DockerCIS Docker Benchmark v1.9.0KubernetesCIS Kubernetes Benchmark v2.1.0Microsoft EdgeCIS Microsoft Edge Benchmark v5.0.0Microsoft Office EnterpriseCIS Microsoft Office Enterprise Benchmark v2.0.0Microsoft Windows 10CIS Microsoft Windows 10 Stand-alone Benchmark v5.0.0Microsoft Windows Server 2019CIS Microsoft Windows Server 2019 Stand-alone Benchmark v4.0.0NGINXCIS NGINX Benchmark v3.1.0PostgreSQL 13CIS PostgreSQL 13 Benchmark v1.4.0VMware ESXi 9CIS VMware ESXi 9.0 Benchmark v1.0.0