CIS Benchmarks publishes updates to database, network, and firewall security standards

Original title: CIS Benchmarks August 2026 Update

CIS Security published six updated benchmarks in August 2026 covering database, firewall, and network switch security. The CIS Microsoft Azure Database Services Benchmark v2.0.0 added 20 recommendations, updated 23, and deleted 2, while removing coverage of retired Azure services. CIS PostgreSQL 13 and 14 Benchmarks v1.3.0 include version-specific updates and corrections. CIS AWS Database Services Benchmark v2.0.0 and CIS FortiGate 7.4.x Benchmark v1.0.1 enable broader security assessment across cloud and network infrastructure. The CIS HPE Aruba CX Switch Benchmark v1.0.0 marks the first benchmark for this network device family. Organizations using these technologies should review the updated recommendations to align their security configurations with current best practices.

What changed

• CIS Microsoft Azure Database Services Benchmark v2.0.0 added 20 new recommendations, updated 23 existing recommendations, deleted 2 recommendations, and addressed 67 improvement tickets. The benchmark removed coverage of retired Azure services: Azure SQL Edge and Azure Database for MariaDB.
• CIS PostgreSQL 13 Benchmark v1.3.0 and CIS PostgreSQL 14 Benchmark v1.3.0 were updated to reflect PostgreSQL version changes and include corrections to documentation errors such as typos.
• CIS AWS Database Services Benchmark v2.0.0 was released as a major version update for AWS database security best practices, incorporating community feedback to strengthen AWS security posture.
• CIS FortiGate 7.4.x Benchmark v1.0.1 introduced 32 configuration artifacts and became the first FortiGate benchmark to support automated scanning through the CIS-CAT tool.
• CIS HPE Aruba CX Switch Benchmark v1.0.0 was released as the inaugural benchmark for HPE Aruba CX Switch devices, developed in collaboration with the HPE Aruba community.

Who is affected

Organizations globally using Azure database services, PostgreSQL databases (versions 13 and 14), AWS database services, FortiGate firewalls, and HPE Aruba CX switches. Cloud infrastructure teams, database administrators, network security teams, and enterprises implementing CIS Benchmarks for security assessment.