Benchmark Sources

Secure Baseline Lookup supports two primary benchmark sources:

1. CISecurity Benchmarks: These are widely used in commercial and business environments.
2. DISA STIG (Security Technical Implementation Guides): Designed for defense and government use cases.

By default, most businesses utilize CISecurity benchmarks, which align with best practices for general security configuration.

How to Use Secure Baseline Lookup

Select a Benchmark Source:

• Use the dropdown menu to choose between CISecurity or DISA STIG.

Choose an Operating System:

• Select the OS of interest from the available list. Options may include popular operating systems such as Windows, Linux, and macOS.

Browse Configuration Recommendations:

• Once the benchmark source and OS are selected, a table displays all configuration recommendations included in the selected benchmark.
• The table may include categories such as user account management, password policies, network configuration, and system logging settings.

Drill-Down for More Information

For a deeper understanding of the recommended practices:

Expand a Row:

• Click the dropdown icon on any row to view detailed descriptions of specific configuration recommendations.

Benchmark Categories:

• Recommendations are grouped into categories for easier navigation. Click on a category to view all related configuration practices.