CIS Benchmarks and Assessor
The Center for Internet Security has benchmarks for securing Linux, Windows, Cloud Providers, Mobile Devices, Networking Equipment, more. IT professionals create an account with your NetID.
The benchmarks often include multiple levels depending on how hardened the system needs to be as referenced by the security controls. These benchmarks are used to provide best practices to the campus community on creating secure deploy-able systems.
The benchmarks can be accessed by creating an account with your firstname.lastname@example.org address. Visit https://workbench.cisecurity.org to create the account and start working with the benchmarks.
Included is CIS-CAT which is an automated assessor of systems. It enables IT pros to check their systems automatically against the CIS benchmarks to determine if they are meeting the benchmark. The assessor, along with the benchmarks themselves, provide clear step-by-step instructions in remediation of the issues found by the assessor.