Benchmarks PLUS

These reports can be used help identify and mitigate known security vulnerabilities across a wide range of platforms by providing you with clear guidance on how to establish a secure configuration posture across your IT infrastructure.

CIS Benchmark Downloads

This work is licensed under a Creative Commons Attribution-Non Commercial-No Derivatives 4.0 International Public License.

Hardened Services Lists
What are the recommended hardened services settings for Windows for PCI DSS, NERC-CIP, NIST 800-53 / 800-171 or other compliance standards?

Recommended Windows Audit Policy settings
Download the GPO template file for direct import and deployment via Active Directory

Recommended Linux Audit Policy settings
Download the NNT Audit Policy Wizard file for direct execution on your host, or for mass deployment using Puppet, for example, and automatically configure an auditor-ready audit policy.

Sample PCI DSS Reports

Sample NIST 800-53 reports

Sample NIST 800-171 reports

Sample DISA STIG Reports

Sample Sarbanes-Oxley SOX Reports

Sample ISO 27K Reports