Cis benchmark automation1/15/2024 ![]() You prove you are compliant with CSAT Control 5.6 by implementing the CIS Windows 10 Enterprise Release 21H1 Benchmark recommendation 1.1.1. Use the audit procedure in the Benchmark to gather evidence that you are compliant with the Benchmarks recommendation and then upload that evidence to CSAT to prove you are compliant with the CSAT Control. This is a subcategory of the main control 5 to protect sensitive data through controlled use of the user accounts and authentication systems- IG2, IG3. This refers to Version 8 Control 5.6: Centralize Account Management through a directory or identity service. Each recommendation in a Benchmark is linked to a CIS Control.Įxample: Windows 10 Enterprise Release 21H1īenchmark recommendation 1.1.1 (L1) Ensure 'Enforce password history' is set to '24 or more password(s)' (Automated). When possible, it is used during the testing process in the CIS Benchmark development lifecycle. CIS-CAT Pro Assessor is designed to coordinate with CIS Benchmark automation content. īenchmarks are guidelines for hardening specific operating systems, middleware, software applications, and network devices. More than 80 CIS Benchmarks are accompanied by machine-readable XML content and are supported for automated configuration assessments in CIS-CAT Pro Assessor v4. Each control is uncategorized into a total of 153 safeguards and these are then identified by implementation groups (IG1, IG2, IG3). The CIS Controls are a general set of recommended practices for securing a wide range of systems and devices. How do CIS Controls relate to the CIS Benchmarks? Solution
0 Comments
Leave a Reply.AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |