March 20th, 2026

New

Compliance Center: CIS Level 1 & Level 2 frameworks

We’ve added full support for CIS Level 1 and CIS Level 2 in the Compliance Center for Securehive/Nextgen tenants.

What’s new

  • New frameworks in Compliance Center

    • CIS Level 1 and CIS Level 2 now appear as first‑class, selectable frameworks in the Compliance Center overview.

    • Each framework has its own snapshot, score, and coverage metrics, aligned with the CIS benchmarks.

  • Level‑aware control coverage & scoring

    • Selecting CIS Level 1 shows only Level 1 controls, with compliance scores calculated from that set.

    • Selecting CIS Level 2 shows all Level 1 controls plus Level‑2‑only controls, with scores recalculated for the expanded control set.

  • Richer CIS control details

    • Each CIS control (e.g., MSI‑1, BSC‑1, HCD‑1, TSC‑1, SSC‑1, ALC‑1, MVC‑1) now includes:

      • Control ID and title

      • CIS framework badges (Level 1 / Level 2)

      • Platform chips (macOS / iOS / iPadOS, where applicable)

      • Recommended configuration, including key, value, and evaluation logic (e.g., EQUAL true, LTE 15)

      • Current compliance state (compliant / non‑compliant / not applicable), consistent with other frameworks

  • “View CIS Level Differences” comparison panel

    • From any CIS snapshot, you can click “View CIS Level Differences” to open a side panel that compares Level 1 vs Level 2.

    • The panel highlights practical differences such as:

      • Encryption, MFA, and patching requirements

      • App hardening levels (moderate vs strict)

      • Sharing restrictions (basic vs full lockdown)

      • Sudo configuration (recommended vs enforced timeout)

      • Hot Corners and content caching expectations

  • Backend‑driven & future‑proof

    • CIS frameworks, controls, and scores are now fully powered by the Compliance Center APIs—no hard‑coded control lists in the UI.

    • Any updates to CIS control definitions in the backend will automatically flow into Compliance Center.

How to use it

  1. Go to Compliance Center → Frameworks / Overview in your Securehive/Nextgen tenant.

  2. Select CIS Level 1 or CIS Level 2 from the framework cards.

  3. Drill into controls to see recommended configurations and your current compliance posture.

  4. Use “View CIS Level Differences” to understand what you gain by moving from Level 1 to Level 2.

Learn more: