Implementing a baseline

Once a direction has been determined on which baseline controls to use within your organization, you need to review the controls and deploy them throughout your organization, as well as build them into your current process moving forward.

CIS

If you opt to move forward with CIS benchmarks, you will need to download the checklist and customize them for your specific needs. CIS also has the option of purchasing hardened images to provide an easier deployment.

To download the latest CIS benchmarks, follow these steps:

1. Open a browser and navigate to https://www.cisecurity.org/.
2. Click on Cybersecurity Tools.
3. Click on Download under CIS Benchmarks.
4. Enter the required information, agree to the terms, then click on Get Free Benchmarks Now:

   Figure 2.6 – The CIS Benchmarks download page.

5. Go to your mailbox and look for an email from CIS (check your Junk email folder too).
6. Open the email and click on Access PDFs. You will be...