Looking for CIS Benchmark reviewers.

[Hugo_vd_Kooij]

Hi,

Some of you may know the CIS benchmakrs for hardening devices. There is even een tool that you can run on your GAIA appliances that will check for the current Check Point CIS Benchmark.

BUT ....

There is now maintainer for this on the CIS board and I think this is the best spot to recruit a small team to review the benchmark and suggest updates so we can get up-to-date with current practises and all.

Please let me know if you want to join the effort and have your own account on CIS Workbench so we can form a small team to get things improved.

I happen to have good contact with Darren of the Center for Internet Security so we can get things done.

[Vincent_Bacher]

As we have strict security regulations as financial institution I don’t know if I am allowed to run a script like this. Can I get more details so I can ask internally if I am allowed to contribute? 
I think it can be interesting.

thanks

Vince

[Hugo_vd_Kooij]

The focus is more on getting the CIS benchmark document itself updated.

Wether or not you use the scripts on you Check Point appliances or cdo the cheks by hand is less relevant.