[chef] CIS (Windows) Benkmarks

[Chris McClimans < >]

CIS puts out security benchmarks and guides to ensure compliance to a
'hardened' os from the base put out by the OS vendors. Is anyone seen
any efforts within the chef community to create a security policy
cookbook that checks for compliance against these (or similar)
standards? I'm thinking of picking something like this up, but it's a
large undertaking and would interest from more than just one customer
to fund it.

Windows Benchmarks:

https://benchmarks.cisecurity.org/downloads/browse/?category=benchmarks.os.windows

Linux Benchmarks:

https://benchmarks.cisecurity.org/downloads/browse/index.cfm?category=benchmarks.os.linux

Database Benchmarks:

https://benchmarks.cisecurity.org/downloads/browse/index.cfm?category=benchmarks.servers.database

MSSQL Benchmarks:

https://benchmarks.cisecurity.org/downloads/browse/?category=benchmarks.servers.database.mssql

(One of my current customers would benefit from Windows 2012r2 + MSSQL
security policy cookbooks)