CIS Benchmarks September 2026 Update

We are excited to announce the publication of the updated CIS Microsoft Windows Server 2022 Benchmark v5.1.0. Our team has devoted significant time and effort to enhance the content of this Benchmark, ensuring it remains relevant and valuable to members.

Summary of changes in this latest version:

•  Recommendations Updated
• All Microsoft Defender Antivirus recommendations removed as Defender now has its own Benchmark
• 1 Recommendation Removed
• 18 Control Mappings Updated

The full changelog is included in the DOCX and PDF versions of the Benchmark.

Many thanks to the CIS Windows Community and Windows Team for making this Benchmark happen. Special thank to Haemish Edgerton and Aaron Margosis.

We are excited to announce the publication of the updated CIS Microsoft Windows 11 Enterprise Benchmark v5.1.0.

Summary of changes in this latest version:

• 3 Recommendations Updated
• All Microsoft Defender Antivirus recommendations removed as Defender now has its own Benchmark
• 1 Recommendation Removed
• 18 Control Mappings Updated

The full changelog is included in the DOCX and PDF versions of the Benchmark.

Many thanks to the CIS Windows Community and Windows Team for making this Benchmark happen. Special thank to Haemish Edgerton and Aaron Margosis.

We are excited to announce the publication of the updated CIS Microsoft Windows Server 2025 Benchmark v2.1.0.

Summary of changes in this latest version:

• 7 Recommendations Updated
• All Microsoft Defender Antivirus recommendations removed as Defender now has its own Benchmark
• 1 Recommendation Removed
• 18 Control Mappings Updated

The full changelog is included in the DOCX and PDF versions of the Benchmark.

Many thanks to the CIS Windows Community and Windows Team for making this Benchmark happen. Special thank to Haemish Edgerton and Aaron Margosis.

We are excited to announce the publication of the updated CIS Microsoft Windows Server 2025 Stand-alone Benchmark v2.0.0.

Summary of changes in this latest version:

• 8 Recommendations Added
• 1 Recommendation Updated
• 6 Recommendations Removed
• 1 Recommendation Renamed
• 18 Control Mappings Updated
• All Microsoft Defender Antivirus recommendations removed as Defender now has its own Benchmark

The full changelog is included in the DOCX and PDF versions of the Benchmark.

Many thanks to the CIS Windows Community and Windows Team for making this Benchmark happen. Special thanks to Haemish Edgerton and Aaron Margosis.

We are pleased to announce the publication of CIS Apache Tomcat Application Server 9 STIG Benchmark v1.1.0.

We are pleased to announce the publication of CIS Apache Tomcat 11 Benchmark v1.1.0.

Highlights include:

• Audit and remediation sections updated to reflect improvements and enhancements to recommendations
• Additional scans and automations created
• Deprecated settings removed

Thanks to the community for all of the involvement, suggestions, and work put into making this benchmark the best it can be.

We are pleased to announce the publication of CIS Apache Tomcat 10.1 Benchmark v1.2.0.

Highlights include:

• Audit and remediation sections updated to reflect improvements and enhancements to recommendations
• Additional scans and automations created
• Deprecated settings removed

Thanks to the community for all of the involvement, suggestions, and work put into making this Benchmark the best it can be.

We are excited to release the updated CIS PostgreSQL 17 Benchmark v2.0.0.

This version includes:

• Updates to reflect version changes and ticket corrections
• New recommendation requiring passwords for all accounts capable of login
• Updated CIS Control mappings

The full changelog is included in the DOCX and PDF versions of the Benchmark.

A huge thank you to the CIS PostgreSQL Benchmark Community. Special thanks to Yorvi Arias.

We are excited to announce publication of the updated CIS Google Chrome Group Policy Benchmark v1.1.0.

Major milestones for this release:

• Updated to align with Chrome v150
• Additional Generative AI recommendations added
• 20 recommendations added to enhance security guidance

A huge thanks to the CIS Google Chrome Community for making this happen.

We are excited to announce publication of the updated CIS Google Chrome Enterprise Core Browser Benchmark v1.1.0.

Major milestones for this release:

• Updated to align with Chrome v150
• Additional Generative AI recommendations added
• 20 recommendations added to enhance security guidance

A huge thanks to the CIS Google Chrome Community for making this happen.

We are excited to announce the updated CIS Google ChromeOS Benchmark v1.2.0.

Major milestones for this release:

• Updated to align with ChromeOS v150
• Additional Generative AI recommendations added
• 20 recommendations added to enhance security guidance

We are excited to announce the publication of the updated CIS Google Workspace Foundations Benchmark v1.4.0.

Highlights include:

• Updated mappings to CIS Controls v7 and v8
• Small bug fixes and clarifications

A huge thank you to the CIS Google Chrome and Google Workspace Communities.

We are excited to announce the new CIS Apple macOS 15 Sequoia STIG Benchmark v1.1.0.

Highlights include:

• Adheres to guidance in the macOS 15 Sequoia STIG
• Adds CIS-CAT assessment content for the macOS 15 STIG for the first time

We are pleased to announce the release of the CIS Microsoft Windows 11 STIG Benchmark v1.2.0.

This release updates the benchmark to align with Version 2, Release 6 of the Microsoft Windows 11 Secure Technical Implementation Guide (STIG).

We are pleased to announce the publication of the new CIS Debian 13 Linux Benchmark v1.1.0.

Highlights include:

Tickets Resolved

Added

• 18 recommendations
• 8 sections

Removed

• 11 recommendations
• 5 sections

Updated

• 200 recommendations
• 40 sections

Special thanks to the Linux Community and the Nix team.

We are excited to announce the publication of the final update of CIS AlmaLinux OS 9 Benchmark v3.0.0.

Highlights include:

• 92 recommendations added
• 34 recommendations removed or restructured
  • 17 removed outright
  • 17 restructured into successor recommendations

Special thanks to the Linux Community and the Nix team.

We are excited to announce the publication of the final update of CIS Oracle Linux 9 Benchmark v3.0.0.

Highlights include:

• 92 recommendations added
• 34 recommendations removed or restructured
  • 17 removed outright
  • 17 restructured into successor recommendations

Special thanks to the Linux Community and the Nix team.

We are excited to announce the publication of the final update of CIS Red Hat Enterprise Linux 9 Benchmark v3.0.0.

Highlights include:

• 92 recommendations added
• 34 recommendations removed or restructured
  • 17 removed outright
  • 17 restructured into successor recommendations

Special thanks to the Linux Community and the Nix team.

We are excited to announce the publication of the final update of CIS Rocky Linux 9 Benchmark v3.0.0.

Highlights include:

• 92 recommendations added
• 34 recommendations removed or restructured
  • 17 removed outright
  • 17 restructured into successor recommendations

Special thanks to the Linux Community and the Nix team.

We are pleased to announce the publication of CIS Arista EOS Benchmark v1.0.0.

We are pleased to announce the publication of the new CIS Ubuntu Linux 26.04 LTS Benchmark v1.0.0.

Much work went into analyzing and expanding this benchmark.

Special thanks to the Linux Community and the Nix team for their contributions.