Using the Center for Internet Security (CIS) Benchmarks to Support an Information Security Management System

Within any organization, securing information assets appropriately is a very important part of the Information Security Management System (ISMS) puzzle. Unfortunately, many organizations leave the configuration of those assets up to the preferences of a very small, autonomous group of folks. Using the Windows 7 platform as an example, we will walk through a few of the secure configuration items of this operating system, highlighting ways to increase awareness and participation so that all groups can have a stake in the direction of securing their information assets through a common set of industry acceptable standards.