For some industries, hardening a system against a publicly known standard is a criteria auditors look for. They are also used to secure on-premises deployments.

CIS benchmark recommendations are adopted in virtual machines in public and private clouds. Applying CIS benchmarksĬIS benchmarks locks down your systems by removing non-secure programs, disabling unused filesystems, disabling unnecessary ports or services, auditing privileged operations and restricting administrative privileges. The SCAP content for audit tooling that scans the system for compliance is CIS certified.

The compliance tooling has two objectives: it lets our customers harden their Ubuntu systems effortlessly and then quickly audit those systems against the published CIS Ubuntu benchmarks.

To drastically improve this process for enterprises, Canonical has made CIS automation tooling available to its Ubuntu Advantage for Infrastructure customers. For large deployments and clouds that may not be practically viable. The CIS benchmark has hundreds of configuration recommendations, so hardening a system manually can be very tedious. It is one of the most recognised industry standards that provides comprehensive secure configuration and configuration hardening checklists in a computing environment. The Center for Internet Security (CIS) is a nonprofit organisation that uses a community-driven process to release benchmarks to safeguard enterprises against cyber attacks.

Download mission critical it systems