Download as PDF, PPTX
Uploaded byRahul Khengare
CIS Security Benchmark
Rahul Khengare gave a presentation on the CIS Security Benchmark to the DevOps-Pune Meetup Group. The agenda included an introduction to the CIS Benchmark, a discussion of the need for compliance, and a demonstration of automation tools. The CIS Benchmark provides consensus-based security configuration guides for technologies including cloud platforms, operating systems, containers, and SaaS products. It defines policies across categories such as identity and access management, logging, and networking. Open source tools like Prowler and Cloudneeti can be used to automate compliance checks against the CIS Benchmark.
More Related Content
Similar to CIS Security Benchmark
![谷歌留痕技术教程[ 𝙩𝙤𝙥 𝟮𝟯𝟯. 𝙘 𝙤𝙢 ]](https://cdn.slidesharecdn.com/ss_thumbnails/top233-260130173900-2eb784f9-thumbnail.jpg?width=640&height=640&fit=bounds)
CIS Security Benchmark
- 1. Rahul Khengare 2 3r d F e b 2 0 1 9 D e v O p s - P u n e M e e t u p G r o u p CIS Security Benchmark
- 2. S r. DevOps Lead • DevOps/DevSecOps/SRE • Blogger(https://oss-world.blogspot.com) • Open Source Software and CIS Contributor • Co-Organizer • DevOps-Pune • DevSecOps-Pune • Past Organization: Motifworks, NTT Data • https://www.linkedin.com/in/rahulkhengare About Me
- 3. • Compliance Need •What is CIS? • How to Achieve Compliance • Demo Agenda
- 4. Data Breac hes https://www.csoonline.com/article/2130877/data-breach/the-biggest-data-breaches-of-the-21st-century.html Compliance Need
- 5. S u rvey O f S ec u rity Profession al Source: 2018 Cloud Security Report, Cybersecurity Insiders Compliance Need
- 6.
- 7. Center for Internet S ec u rity • For Technology • Consensus-based development process • Security configuration guide • Best Current Practice + Best Leading Practice • Automation support CIS Benchmark
- 8. Availab le Cloud • Azure,AWS, GCP Operating System • Linux, Windows, Mac OS Containers • Docker, Kubernetes Web Technology • Apache, Nginx SaaS Product • Microsoft Office 365 Other • Chrome, Internet Explorer, IBM • CISCO, many more CIS Benchmark
- 9. O ver view Benchmark Category1Category NCategory3Category2 Policies PoliciesPoliciesPolicies CIS Benchmark
- 10. S amp leCategories • Identity & Access Management (IAM) • Logging • Monitoring • Networking • Other (VM, App Plans) CIS Benchmark
- 11. Polic y Over view • Compliance Number • Policy Name • Profile Applicability(Level1, Level2) • Score • Description • Rationale • Audit Procedure • Remediation Procedure • Impact • Default Value • References CIS Benchmark
- 12. O p enS ou rc e Tool • Prowler • AWS-security-benchmark • CloudSploit • cs-suite CIS Automation
- 13.
- 14.
- 15. • https://workbench.cisecurity.org • https://github.com/toniblyx/prowler •https://github.com/awslabs/aws-security-benchmark • https://github.com/cloudsploit/scans • https://github.com/SecurityFTW/cs-suite References
- 16.
- 17.