CIS Benchmarks Update November 2025

CIS Oracle MySQL 8.0 Enterprise Edition Benchmark v1.5.0

This release improves cryptographic and account security guidance:

• Corrected 11 documented issues
• Backported FIPS 140-2 Open_SSL cryptography recommendation
• Enforced password policy for all MySQL accounts

Special thanks to Mike Frank and Oracle, and to the CIS Oracle MySQL Benchmark Community for your precision and dedication.

CIS Oracle MySQL 8.0 Community Server Benchmark v1.2.0

Enhancements include:

• Addressed 11 tickets
• Added FIPS 140-2 Open_SSL cryptography guidance
• Backported password enforcement recommendation
• Corrected versioning in changelog

Thanks to Mike Frank, Oracle, and the CIS Community for your ongoing support.

CIS Microsoft Azure Foundations Benchmark v5.0.0

A major update reflecting evolving cloud security practices:

• 22 new recommendations
• 58 updated recommendations
• 1 deprecated recommendation removed
• 110 tickets resolved
• Retired “Common Reference Recommendations” section

Deep gratitude to Rachel Rice for her prolific contributions and to the entire Azure Community for driving this release forward.

CIS Google Android Benchmark v1.6.0

This version aligns mobile security guidance across platforms:

• Harmonized with CIS Apple iOS Benchmark
• Added recommendations from community input

Special thanks to Randie Bejar and the CIS Android Community for your commitment to mobile security excellence.

CIS Microsoft Edge Benchmark v4.0.0

Browser hardening updates include:

• 7 new ADMX-based security settings
• 8 updated settings
• 9 removed settings
• Section restructuring based on ADMX template changes

Thanks to Haemish Edgerton, William Ferguson, Joe Goerlich, Daniel Jasiak, Aaron Margosis, and the CIS Windows Browser Community for your detailed technical contributions.

CIS IBM Db2 11 Benchmark v1.2.0

This release improves clarity and auditability:

• Resolved 11 tickets
• Enhanced descriptions, rationale, and remediation steps

Special thanks to Greg Stager and the CIS Db2 Benchmark Community for your thoughtful refinements.

CIS Red Hat Enterprise Linux 10 Benchmark v1.0.1

This bug fix release for the new technology version includes:

• Updated 21 recommendations

A huge thank you to the CIS Team NIX for making this Benchmark happen.

CIS IBM z/OS with RACF Benchmark v1.0.0

This updated Benchmark reflects extensive analysis and content refinement.

Special thanks to Daniel Burk and Mark Nelson – your hard work made this Benchmark possible.

CIS Microsoft Windows Server 2025 Stand-alone Benchmark v1.0.0

This new Benchmark delivers enhanced guidance for securing Windows Server 2025 environments.

Thanks to the CIS Windows Community and Windows Team for your dedicated efforts. Special thanks to Haemish Edgerton and Aaron Margosis for your expert contributions.

CIS Rocky Linux 10 Benchmark v1.0.0

This new technology version provides foundational security recommendations for Rocky Linux 10.

A huge thank you to the CIS Team NIX for making this Benchmark happen.

CIS AlmaLinux OS 10 Benchmark v1.0.0

This new technology version introduces secure configuration guidance for AlmaLinux OS 10.

A huge thank you to the CIS Team NIX for making this Benchmark happen.

CIS Apple iOS and iPadOS 18 for Intune Benchmark v1.0.0

Major milestones for this release:

• Updated guidance to mirror the existing CIS Apple iOS and iPadOS Benchmark
• Added recommendations based on community input

A huge thanks to Lewis Hardy, author of the Benchmark, for leading this effort.

CIS FortiGate 7.4.x Benchmark v1.0.0

This release reflects extensive collaboration and technical drafting.

Special thanks to Eric Leong, Tim Smith, and Peter Tomis, and to the Fortinet community for your support.