CIS Benchmarks

Assess a selected benchmark/version against explicitly authorized systems. Scanner output is partial evidence, not certification; verify applicability, documented exceptions and operational impact before remediation.

When to Use This Skill

Use this skill when:

• Assessing security compliance
• Implementing security baselines
• Meeting regulatory requirements
• Hardening systems to standards

Assessment Tools

OpenSCAP

# Install
apt install openscap-scanner scap-security-guide