8.3.4 Ensure standard processes are used for VM deployment


Have a standard process for VM deployment whether this is a VMware template or another means to ensure Operating Systems have the appropriate security controls. Refer to CIS Benchmarks for information in regards to specific Operating System hardening.


By utilizing a standard deployment process and having hardened templates you can ensure that all your virtual machines are created with a known baseline level of security.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.


Create documentation and a standard process for the method for VM deployment. If utilizing templates in VMware create the templates, document the process for using them as well as keeping them up-to-date, then ensure the process is followed accordingly through periodic review.

See Also