Outdated CIS Microsoft Azure Foundation benchmark on CSP dashboard (v2 on Elastic & v6 on CIS site)
- Dominant language
- Go
- Stars
- 58
- Forks
- 55
- Avg merge
- 9h 9m
- Merged PRs (30d)
- 424
Description
**Describe the bug**
We are using the Elastic Cloud Security Posture (CSP) Management to improve our compliance score, but the current CIS Benchmark version is outdated.
Rules that have been flagged as depreciated are reported as findings and other new rules are not being applied against our subscriptions. Would appreciate if the benchmark version could be updated.
**Preconditions**
Requires Elastic Security and integration with Azure cloud provider.
**To Reproduce**
Steps to reproduce the behavior:
1. Browse to your "Security" space
2. Go to `Dashboards`
3. Under `Security views` click on `Cloud Security Posture`
4. The `Cloud Security Posture` will then load.
5. Scrolling down on the page on the left-hand side you will see the various benchmarks for the cloud providers (in our case Azure) and the relevant version.
**Expected behavior**
[CIS Microsoft Azure Foundations Benchmark v2.0.0](https://github.com/user-attachments/files/17829861/CIS_Microsoft_Azure_Foundations_Benchmark_v2.0.0.1.pdf) has been deprecated.
We would like to use the latest version of the CIS benchmark to measure our CSP and focus our efforts on rules that are relevant and not spend time on audit rules that have been deprecated.
**Additional context**
If you are interested in reading the [CIS Microsoft Azure Foundations Benchmark v6.0.0](https://learn.cisecurity.org/l/799323/2026-04-07/4vvdjt?pk_vid=7b2fac92c6c5000f177926453998466c) it can be downloard from their site.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.