I could not find an policies in the library to download for Windows server 2016#
The CIS benchmark policies for Windows 2016 will be available in the Policy Library later this week/early next week. In the meantime I'm attaching to policy xmls here so you can import them manually.
I too would liketo know when Windows Server 2016 is going to be added to the technologies.
CIS benchmark is still not out yet. They anticipate releasing it around end of Jan. We are currently working on the SCM based controls and targeting SCM policy for Windows 2016 for end Feb/March. If the CIS benchmark is released at the end of the month as expected then we will prioritize the CIS benchmark policy first. It is usually a smaller subset of the SCM controls.
As far as Windows Server 2016 technology is concerned, it is already supported. We added support for it back in July.
What does SCM stand for in this context?
Microsoft Security Compliance Manager.
I just checked Qualys and do not see Windows Server 2016. Can someone please provide an update as to when this will be available? Specifically we are looking for the NIST policy.
Quick update on the Windows Server 2016 policies. The SCM policy going out in this month's library update. CIS released the benchmark on 3/31/17 so we are also working on that policy and hope to have in the next month's update.
For NIST policy, all of our CIDs are mapped to NIST 800-53 so you can easily create the NIST policy using the control copy feature and adding Server 2016 technology to the existing NIST policy in the library.
We still do not see the CIS template for windows 2016? Do you have an update on when this will be available.
Retrieving data ...