book
Article ID: 331406
calendar_today
Updated On:
Issue/Introduction
The
CIS Critical Security Controls (CIS Controls) are a recommended set of actions for cyber defense that provide specific and actionable ways to thwart the most pervasive attacks. CIS Controls and CIS Benchmarks provide global standards for internet security and are a recognized global standard and best practices for securing IT systems and data against attacks. VMware Aria Operations Compliance Pack for CIS provides Alerts, Policies, and Reports to validate the vSphere resources against the CIS benchmarks.
The VMware Aria Operations Compliance Pack for CIS is updated to support the following benchmarks:
- CIS_VMware_ESXi_6.7_Benchmark_V1.3.0
- CIS_VMware_ESXi_7.0_Benchmark_V1.2.0
Resolution
Attached to this article is CIS Controls in CIS Compliance Pack.xlsx which contains the details of the conditions implemented in VMware Aria Operations (SaaS) and is based on the above mentioned versions of the benchmark.
The list also has the details of manual controls where conditions are excluded from automated assessment. This list of controls can be used to perform manual checks on your vSphere environments.
Additional Information
Disclaimer: VMware is not responsible for the reliability of any data, opinions, advice, or statements made on third-party websites. Inclusion of such links does not imply that VMware endorses, recommends, or accepts any responsibility for the content of such sites.
Legal Disclaimer:
This compliance pack and the associated configuration guides are intended to provide general guidance for organizations that are considering VMware solutions to help them address compliance requirements. This is not intended to provide regulatory advice and is provided “AS IS”. VMware makes no claims, promises or guarantees about the accuracy, completeness, or adequacy of the information contained herein. Organizations should engage appropriate legal, business, technical, and audit expertise within their specific organization for review of regulatory compliance requirements.