179 lines
10 KiB
HTML
179 lines
10 KiB
HTML
<!doctype html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="date" content="2026-07-17T08:00:00Z">
|
|
<title>Benchmark Result - Synthetic CIS Benchmark</title>
|
|
</head>
|
|
<body>
|
|
<main id="reportContainer">
|
|
<section id="summary">
|
|
<h1>Summary</h1>
|
|
<table>
|
|
<caption>Assessment Summary</caption>
|
|
<thead><tr><th>Benchmark</th><th>Profile</th><th>Score</th></tr></thead>
|
|
<tbody><tr><td>Synthetic CIS Benchmark</td><td>Level 1</td><td>50</td></tr></tbody>
|
|
</table>
|
|
</section>
|
|
|
|
<!--
|
|
Kopfangaben, Bewertungsanzeige und Abschnittsuebersicht eines
|
|
CIS-CAT-Pro-Berichts.
|
|
|
|
Die Zahlen des Summary-Blocks entsprechen genau den beiden
|
|
Ergebniszeilen dieser Datei (1 Pass, 1 Fail), damit die bestehende
|
|
Gegenprobe des Imports unveraendert aufgeht. Die Spaltennamen der
|
|
Abschnittsuebersicht sind woertlich uebernommen ("Unkn.", "Man.",
|
|
"Exc."), weil der Import genau an ihnen erkennt, welche Tabelle den
|
|
Punktwert je Benchmarkabschnitt traegt. Die Systemangaben stehen als
|
|
beschriftete Wertepaare, nicht an einer festen Stelle im Aufbau.
|
|
-->
|
|
<!--
|
|
Titelseite eines CIS-CAT-Pro-Berichts, im Aufbau uebernommen: das
|
|
bewertete System steht als "for <Host>" in der zweiten Ueberschrift, die
|
|
Netzadresse als "Target IP Address" im Listenpunkt darunter, und Profil,
|
|
Zeitpunkt sowie Dauer stehen als unbeschriftete Listenpunkte unter der
|
|
Benchmarkzeile. Beschriftete Wertepaare gibt es hier nicht.
|
|
-->
|
|
<div id="coverPageTitle">
|
|
<h1>Security Configuration Assessment Report</h1>
|
|
<h1>for SYNTHETIC-HOST-01</h1>
|
|
<ul>
|
|
<li>Target IP Address: 203.0.113.10</li>
|
|
</ul>
|
|
</div>
|
|
<div id="coverPageSubTitle">
|
|
<h2>Synthetic CIS Benchmark v2.0.0</h2>
|
|
<ul>
|
|
<li>Level 1 - Synthetic Member Server</li>
|
|
<li>Friday, July 17 2026 08:00:00</li>
|
|
<li> Assessment Duration: 1 minutes, 5 seconds</li>
|
|
</ul>
|
|
</div>
|
|
<div class="introFooter">
|
|
<p>Report generated by the Center for Internet Security's Configuration Assessment Tool (CIS-CAT Pro Assessor) v4.61.0.</p>
|
|
</div>
|
|
|
|
<section id="summary-metrics">
|
|
<table class="summary-full">
|
|
<tr>
|
|
<th colspan="6">
|
|
<div class="metric-value">1<span class="total-metric-value"> / 2</span></div>
|
|
<div class="summary-label">Passed Recommendations</div>
|
|
</th>
|
|
<td rowspan="2" class="summary-score"><div class="gauge" data-score="50"></div></td>
|
|
</tr>
|
|
<tr>
|
|
<td><div class="metric-value pass">1</div><div class="metric-label">Pass</div></td>
|
|
<td><div class="metric-value fail">1</div><div class="metric-label">Fail</div></td>
|
|
<td><div class="metric-value error">0</div><div class="metric-label">Error</div></td>
|
|
<td><div class="metric-value unknown">0</div><div class="metric-label">Unknown</div></td>
|
|
<td><div class="metric-value manual">0</div><div class="metric-label">Manual</div></td>
|
|
<td><div class="metric-value excepted">0</div><div class="metric-label">Excepted</div></td>
|
|
</tr>
|
|
</table>
|
|
</section>
|
|
|
|
<section id="sectionScores">
|
|
<table class="summary-sections">
|
|
<thead>
|
|
<tr>
|
|
<th>Description</th><th>Pass</th><th>Fail</th><th>Error</th><th>Unkn.</th>
|
|
<th>Man.</th><th>Exc.</th><th>Score</th><th>Max</th><th>Percent</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr>
|
|
<td>1 Account Policies</td><td>1</td><td>1</td><td>0</td><td>0</td>
|
|
<td>0</td><td>0</td><td>1.0</td><td>2.0</td><td>50%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1.1 Password Policy</td><td>1</td><td>0</td><td>0</td><td>0</td>
|
|
<td>0</td><td>0</td><td>1.0</td><td>1.0</td><td>100%</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2 Local Policies</td><td>0</td><td>0</td><td>0</td><td>0</td>
|
|
<td>0</td><td>0</td><td>0.0</td><td>0.0</td><td>0%</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</section>
|
|
|
|
<section id="profiles">
|
|
<h1>Profiles</h1>
|
|
<table class="profile">
|
|
<caption>Selected Profiles</caption>
|
|
<thead><tr><th>Profile</th><th>Selected</th></tr></thead>
|
|
<tbody><tr><td>Level 1</td><td>Yes</td></tr></tbody>
|
|
</table>
|
|
</section>
|
|
|
|
<section id="assessment-results">
|
|
<h1>Assessment Results</h1>
|
|
<table id="assessmentResultTable" class="result">
|
|
<thead><tr><th>w</th><th>Benchmark Item</th><th>Result</th></tr></thead>
|
|
<tbody>
|
|
<tr><td>1.0</td><td><a href="#detail-syn-111">1.1.1 Ensure the synthetic setting is enabled</a></td><td><a href="#detail-syn-111">Fail</a></td></tr>
|
|
<tr><td>1.0</td><td><a href="#detail-syn-112">1.1.2 Ensure the synthetic audit setting is enabled</a></td><td><a href="#detail-syn-112">Pass</a></td></tr>
|
|
</tbody>
|
|
</table>
|
|
</section>
|
|
|
|
<section id="assessment-details">
|
|
<h1>Assessment Details</h1>
|
|
<div id="detail-syn-111" class="Rule visible">
|
|
<span class="outcome fail ruleResultArea">Fail</span>
|
|
<h3 class="ruleTitle">1.1.1 Ensure the synthetic setting is enabled</h3>
|
|
<div class="description"><div class="bold">Description:</div><p>Synthetic recommendation without system data.</p></div>
|
|
<div class="rationale"><p>The setting reduces a synthetic risk.</p></div>
|
|
<div class="fixtext"><p>Enable the setting after testing.</p><code class="code_block">Computer Configuration\Synthetic Policy</code><p class="bold">Impact:</p><p>Validate compatibility before deployment.</p></div>
|
|
<div class="check" id="detail-syn-111">
|
|
<!-- Bedienwort und Bezeichnung des Aufklappblocks stehen in zwei
|
|
getrennten Elementen; die Bezeichnung traegt keinen Doppelpunkt. -->
|
|
<div><span class="action" id="syn-111_evidence_button">Show</span><span class="caption">Assessment Evidence</span></div>
|
|
<div class="xml" id="syn-111_evidence">
|
|
<table class="evidence-sep"><caption>Complex Check</caption><tr><th>AND</th><td>Criterion: Synthetic setting is enabled</td></tr></table>
|
|
<table class="evidence"><caption>Synthetic Item</caption><tr><th>Name</th><th>Type</th><th>Status</th><th>Value</th></tr><tr><td>Setting</td><td>String</td><td>Exists</td><td>Disabled</td></tr></table>
|
|
</div>
|
|
</div>
|
|
<div><span class="action" id="syn-111_xml_result_button">Show</span><span class="caption">Rule Result XML</span></div>
|
|
<div class="xml" id="syn-111_xml_result"><pre><xccdf:rule-result idref="synthetic-1.1.1"><xccdf:result>fail</xccdf:result></xccdf:rule-result></pre><table><caption>XML Evidence</caption><tr><th>Name</th><th>Value</th></tr><tr><td>Duplicated in XML</td><td>Ignored as linked table</td></tr></table></div>
|
|
<!-- Der Bericht verwendet fuer die Belegstellen dieselbe Listenklasse
|
|
wie fuer die Rahmenwerk-Zuordnungen; nur der umgebende Block
|
|
unterscheidet sie. -->
|
|
<div class="reference"><p>References:</p><ul class="referenceList"><li>URL: SYNTHETIC-CONTROL-1</li></ul></div>
|
|
<p><span title="0"><span class="bold">CIS Controls V7.0:</span></span></p>
|
|
<!-- Die Steuerung selbst steht fett und mit Doppelpunkt im Listenpunkt -
|
|
sie sieht damit aus wie eine Abschnittsueberschrift, benennt aber
|
|
den Listenpunkt und nicht den Abschnitt. -->
|
|
<ul class="referenceList"><li><span class="bold">Control 1: Synthetic Inventory:</span> -- More<table class="enum"><thead><tr><th colspan="2">CIS Control Information</th></tr></thead><tr><td class="enum_name">Control:</td><td>Maintain a synthetic inventory.</td></tr><tr><td class="enum_name">Subcontrol:</td><td>1.1</td></tr><tr><td class="enum_name">Label:</td><td>Synthetic Inventory</td></tr><tr><td class="enum_name">Description:</td><td></td></tr></table></li></ul>
|
|
<p><span title="0"><span class="bold">CIS Critical Security Controls V8.0:</span></span></p>
|
|
<ul class="referenceList"><li><span class="bold">Control 2: Synthetic Assets:</span> -- More<table class="enum"><thead><tr><th colspan="2">CIS Control Information</th></tr></thead><tr><td class="enum_name">Control:</td><td>Manage synthetic assets.</td></tr><tr><td class="enum_name">Safeguard:</td><td>2.1</td></tr><tr><td class="enum_name">Label:</td><td>Synthetic Assets</td></tr><tr><td class="enum_name">Implementation Group:</td><td>IG-1</td></tr></table></li></ul>
|
|
<div class="backtop"><a href="#summary">Back to Summary</a></div>
|
|
</div>
|
|
|
|
<div id="detail-syn-112" class="Rule visible">
|
|
<span class="outcome pass ruleResultArea">Pass</span>
|
|
<h3 class="ruleTitle">1.1.2 Ensure the synthetic audit setting is enabled</h3>
|
|
<div class="description"><div class="bold">Description:</div><p>Synthetic audit recommendation.</p></div>
|
|
<div class="rationale"><p>The setting records synthetic events.</p></div>
|
|
<div class="fixtext"><p>Enable synthetic auditing.</p></div>
|
|
<div class="check" id="detail-syn-112">
|
|
<!-- Regression: CIS-CAT bettet dieselbe Belegtabelle mitunter
|
|
wortgleich ein zweites Mal in denselben Regelblock ein - der
|
|
Originalbericht zeigt sie trotzdem nur einmal. -->
|
|
<div><span class="action" id="syn-112_evidence_button">Show</span><span class="caption">Assessment Evidence</span></div>
|
|
<div class="xml" id="syn-112_evidence">
|
|
<table class="evidence-sep"><caption>Complex Check</caption><tr><th>AND</th><td>Criterion: Synthetic audit setting is enabled</td></tr></table>
|
|
<table class="evidence"><caption>Synthetic Audit Item</caption><tr><th>Name</th><th>Type</th><th>Status</th><th>Value</th></tr><tr><td>Setting</td><td>String</td><td>Exists</td><td>Enabled</td></tr></table>
|
|
<table class="evidence"><caption>Synthetic Audit Item</caption><tr><th>Name</th><th>Type</th><th>Status</th><th>Value</th></tr><tr><td>Setting</td><td>String</td><td>Exists</td><td>Enabled</td></tr></table>
|
|
</div>
|
|
</div>
|
|
<div class="xml" id="syn-112_xml_result"><pre><xccdf:rule-result idref="synthetic-1.1.2"><xccdf:result>pass</xccdf:result></xccdf:rule-result></pre></div>
|
|
<div class="reference"><p>References:</p><ul><li>URL: SYNTHETIC-CONTROL-2</li></ul></div>
|
|
</div>
|
|
</section>
|
|
</main>
|
|
</body>
|
|
</html>
|