CIS Benchmarks January 2026 Update

We are excited to announce the publication of the updated CIS Wind River eLxr 12 Benchmark v1.2.0. A lot of effort has gone into analyzing and adding content to this Benchmark. Here are some highlights of the work that was done:

Added:

• Four sections
• 80 Recommendations

Dropped:

• Eight Sections
• 81 Recommendations

Updated:

• Seven Sections
• 227 Recommendations

A special thank you to Binghui Ji, the Linux Community, and the Nix team. Without their hard work, this Benchmark would not have been possible.

We are excited to announce the publication of the new CIS NGINX Benchmark v3.0.0
The team dedicated considerable time and effort to enhance the content of this benchmark.

Some highlights are:

• This is a prose only Benchmark release.
• Updated and added several audit and remediation procedures.
• Addressed and removed obsolete recommendations.

A change log detailing the modifications made is included in the Doc and PDF versions of the Benchmark.

A huge and special thanks to Stephan Wenderlich for making this Benchmark happen.

We are happy to announce the publication of CIS Red Hat OpenShift Container Platform Benchmark v1.9.0

This Benchmark includes support for all current OpenShift version releases

• Over 15 recommendations have been edited and enhanced.
• The Benchmark and recommendations have been updated to support the latest version of OpenShift v4.20.

A huge thank you to the CIS Kubernetes Community for making this happen. Special thanks to Mark Larinde and the Red Hat OpenShift team for their dedication to making this Benchmark the best it can be.

We are excited to announce the publication of a bug fix release for CIS Microsoft SQL Server 2019 Benchmark v1.5.2:

• Updated Audit procedure and fixed artifact issue for one recommendation to be included in the upcoming CIS-CAT release.

A change log detailing the modifications made is included in the Doc and PDF versions of the Benchmark.

We are pleased to announce the Final Release of CIS Fortigate 7.0.x Benchmark v1.4.0. This Benchmark has no changes from the previous Benchmark. But a lot of work went into ensuring that it was up to date and accurate.

Special thanks to Eric Leong for authoring this Benchmark and Tabitha Haug for her diligent efforts to verify the settings were accurate.

Here are some highlights of the work that was done:

A special thank you to Mark Pocock and Graham Eames. Without their hard work, this Benchmark would not have been possible.

We are excited to announce the publication of the updated CIS Oracle MySQL 8.4 Community Server Benchmark v1.1.0 Benchmark. Here are some highlights of the work that was done:

• Addressed 8 tickets.
• Updated a recommendation for FIPS 140-2 Open_SSL Cryptography.
• Updated to remove unsupported configurations.
• Addressed issues reported with the Automated Assessment Content.
• A change log detailing the modifications made is included in the Doc and PDF versions of the Benchmark. A huge thank you to the CIS Oracle MySQL Benchmark Community for making this Benchmark happen.

Special thanks to Mike Frank and Oracle.

We are excited to announce the publication of the updated CIS Oracle MySQL 8.4 Enterprise Edition Benchmark v1.1.0 Benchmark. Here are some highlights of the work that was done:

• Addressed 9 tickets.
• Updated a recommendation for FIPS 140-2 OpenSSL Cryptography.
• Updated to remove desupported configurations.
• Addressed issues reported with the Automated Assessment Content.
• A change log detailing the modifications made is included in the Doc and PDF versions of the Benchmark. A huge thank you to the CIS Oracle MySQL Benchmark Community for making this Benchmark happen.

Special thanks to Mike Frank and Oracle.

We are excited to release the update CIS Oracle Database 19c Benchmark v2.0.0! This represents a significant overhaul of the benchmark to backport changes from Oracle Database 23ai as well as incorporate new insights and guidance from the community.

A huge thanks to the Oracle Database Security team as well as to:

• Emad Al-Mousa
• Nelly Chng
• Alexander Kornbrust
• Russ Lowenthal
• Jay Mehta

We are excited to release the final update for the CIS Apple iOS 18 Benchmark v2.0.0.

This final update has minor fixes and grammatical updates.

A huge thank you to the CIS Apple iOS Community for making this Benchmark happen. Special thanks to Pierluigi Falcone and Ron Colvin.

We are excited to release the final update for the CIS Apple iPadOS 18 Benchmark v2.0.0.

This final update has minor fixes and grammatical updates.

A huge thank you to the CIS Apple iOS Community for making this Benchmark happen. Special thanks to Pierluigi Falcone and Ron Colvin.

This Benchmark includes support for Kubernetes clusters built on Kubernetes v1.32, 1.33 & 1.34:

• 12 recommendations have been automated with Script Check Engine (SCE).
• Over 40 recommendations have been edited and enhanced.
• The Benchmark and recommendations have been updated to support Kubernetes v1.32, 1.33, 1.34.

Special Thanks to Mark Larinde for his dedication to making this benchmark the best it can be.

This Benchmark includes support for Kubernetes clusters built on Kubernetes v1.32, 1.33 & 1.34:

• 12 recommendations have been automated with Script Check Engine (SCE).
• Over 40 recommendations have been edited and enhanced.
• The Benchmark and recommendations have been updated to support Kubernetes v1.32, 1.33, 1.34.

A huge thank you to the CIS Kubernetes Community for making this happen. Special thanks to Mark Larinde for his dedication to making this benchmark the best it can be.

This Benchmark includes support for Kubernetes clusters built on Kubernetes v1.32, 1.33 & 1.34:

• 12 recommendations have been automated with Script Check Engine (SCE).
• Over 40 recommendations have been edited and enhanced.
• The Benchmark and recommendations have been updated to support Kubernetes v1.32, 1.33, 1.34.

Lots of time and effort goes into creating a new technology release benchmark.
A huge thank you to the CIS Kubernetes Community for making this happen. Special thanks to Mark Larinde for his dedication to making this benchmark the best it can be.