AnsweredAssumed Answered

CIS Control Numbering Inconsistency

Question asked by James Dawson on May 2, 2019
Latest reply on May 9, 2019 by James Dawson

Hi all, 

 

This is an odd one and I'm probably doing something wrong - so please set me straight!

 

I'm running a PC scan using CIS Benchmark for CISCO IOS 15.

 

Within the results, the following control is included: 

 

5. Management Plane - SNMP Rules: (5.11) 8553 Status of the 'SNMP user security' setting 

 

However, according to the published policy, and #CIS themselves, this control does not exist, and in fact section 5 ends at control 5.10.

 

Where is Qualys finding this control from?

 

Many thanks

 

James 

 

[community admin: thread title updated from "Seeing additional controls that CIS says does not exist"]

Outcomes