The development and proliferation of consensus security configuration benchmarks for systems connected to the Internet

Abstract

This paper describes the formation of The Center for Internet Security and the process it and its members are using to produce globally recognized and adopted consensus security benchmarks for users to configure their workstations, servers, routers, firewalls, switches and other devices. Examples are provided of the benchmark standards developed via this global consensus process. Scoring Tools used to monitor compliance with the benchmark settings are also discussed.