CIS CAT PRO

Overview CIS

https://www.cisecurity.org/ 

The Center for Internet Security (CIS):

is a nonprofit organization that develops and promotes best practice standards for IT security. 

1. CIS Controls - a prioritized set of actions to protect organizations from cyber threats

2. CIS Benchmarks - detailed configuration guidelines for securing specific technologies

3. CIS-CAT PRO - tools that help organizations assess their security posture against CIS Benchmarks

4. CIS Hardened Images - pre-configured secure virtual machine images
   
   
   

CIS, CISA, and MS-ISAC: Differences and Relationships

CIS (Center for Internet Security)

• Type: Nonprofit organization

• Audience: Organizations of all types and sizes (public and private sectors)

• Focus: Develops security standards, benchmarks, and tools

• Key offerings: CIS Controls, CIS Benchmarks, security assessment tools, hardened images

CISA (Cybersecurity & Infrastructure Security Agency)

• Type: Federal government agency under DHS

• Audience: Critical infrastructure, government agencies, private sector

• Focus: National cybersecurity protection, coordination, and response

• Key offerings: Threat intelligence, vulnerability management, incident response support

MS-ISAC (Multi-State Information Sharing & Analysis Center)

• Type: Division of CIS, funded by CISA

• Audience: State, local, tribal, and territorial governments

• Focus: Cybersecurity information sharing and support for U.S. SLTT entities

• Key offerings: Threat intelligence, incident response, cyber education, 24/7 SOC services

Relationships & Collaboration

• MS-ISAC is operated by CIS but funded by CISA

• CISA relies on CIS standards and MS-ISAC for coordination with state/local governments

• They collaborate on threat intelligence sharing, incident response, and developing best practices

• They often jointly issue advisories and conduct coordinated response to major cyber incidents

Assessor: Demonstration 

1. Download Assessor

2. Download License

3. https://workbench.cisecurity.org/files 

Live view on Local Machine 

1. Initial Run

2. Review Results

3. Change FAIL settings 

4. Review NEW results

5. Compare

Config File For Multiple Targets

https://drive.google.com/file/d/1hnFenR5wfrq9sX8qsOSosJXRW4ggqK1M/view?usp=sharing