topic Re: CIS Database Controls in Tech Talk

CIS Database Controls

Nolsie — Wed, 20 Mar 2019 11:17:52 GMT

Good Day All,

Does anybody have a condensed view or resource that details specific CIS controls for hardening databases ? I have looked through the 20 downloadable controls from the CIS site, and mention of database hardening only mentions using standard templates, not much by the way of detail. so has anybody been able to expand upon this ?

Many Thanks

Paul

Re: CIS Database Controls

Nolsie — Wed, 20 Mar 2019 11:29:37 GMT

Found a much more in depth resource within the CIS Benchmarks area of their site, so all good.

Re: CIS Database Controls

emb021 — Wed, 20 Mar 2019 13:57:21 GMT

Yes, their Benchmarks are the hardened baselines they speak of. Have them for most OSs, Cloud, and DBs.

Re: CIS Database Controls

Cousy14 — Wed, 20 Mar 2019 14:25:16 GMT

The DB benchmarks are available online in .pdf format. You can also access the baselines in Word or Excel format by using the CIS SecureSuite (free for government agencies). The SecureSuite also has pre-hardened images that are compliant with the associated security benchmark (at least they have images for operating systems, not sure about DBs).

https://www.cisecurity.org/cis-securesuite/