CIS Updates Security Benchmarks for Microsoft, AWS, Cisco and More

Summary

CIS announced updated and new security configuration benchmarks covering Microsoft 365 and Windows, AWS, Cisco, Tencent Cloud, SUSE Linux Enterprise, and Sophos Firewall, with changes including new settings and automated assessment content.

Key points

• Updated benchmarks include Microsoft 365 Foundations, Windows Server 2022, Windows 11, AWS Foundations, Apache Tomcat 9, and Cisco IOS XE router and switch benchmarks.
• The Microsoft 365 update adds automated assessment content and automation for Microsoft Fabric settings.
• The Windows Server 2022 benchmark adds three security settings, updates 16, removes 17, and revises sections to reflect updated ADMX templates.
• The Windows 11 Standalone benchmark adds 12 security settings, updates 22, and removes 19.
• The AWS Foundations update adds and revises security recommendations, adjusts sections for AWS changes, and removes outdated settings.
• New benchmarks cover Tencent Cloud Enterprise, SUSE Linux Enterprise 16, and Sophos Firewall v22.x.
• CIS also says a draft Wind River eLxr 12 benchmark is available for review.

People

Vendors

Products

Related Articles

• AI Speeds Up Cyber Threats, but Security Fundamentals Still MatterCIS SecureSuite Platform · CIS-CAT Pro Assessor
• CIS Updates Security Benchmarks for Windows, Linux, Browsers, and MoreCIS Microsoft Windows 11 Enterprise Benchmark · CIS Microsoft Windows 11 STIG Benchmark
• UK Organizations Urged to Turn Cybersecurity Awareness Into ResilienceCIS SecureSuite Platform
• CIS Promotes Mapping Healthcare Security Controls to HIPAA RequirementsCIS SecureSuite Platform
• CIS Updates Security Benchmarks and Releases New Hardening GuidesCIS Microsoft 365 Foundations Benchmark