Ciskonfiguratsioon

Ciskonfiguratsioon, in Estonian IT discourse, refers to configuring a computer system to align with CIS (Center for Internet Security) security baselines and benchmarks. The aim is to establish a secure, repeatable configuration state that reduces common vulnerabilities while preserving necessary functionality.

Etymology and scope: The term is formed by combining the acronym CIS with the Estonian noun "konfiguratsioon." It covers selecting relevant CIS Benchmarks, applying baseline settings, turning on recommended security features, and removing or disabling unnecessary services. The practice spans operating systems, applications, networks and cloud environments, often implemented through automation.

Process: It typically begins with asset discovery and inventory, followed by choosing the appropriate CIS benchmark for the platform. Configurations are applied via manual steps or configuration management tools, then validated using compliance scanners, audits and functional tests. Ongoing monitoring and regular updates are essential to maintain the baseline as threats and software evolve.

Examples and impact: Common areas include Linux and Windows host hardening, secure SSH and password policies, auditing, and minimizing installed components. In cloud and container environments, CIS benchmarks guide IAM, network policies, and image hardening. While improving security, strict baselines may affect usability or compatibility, necessitating careful change management.

Relation to standards and governance: Ciskonfiguratsioon is a practical approach rather than a formal certification. It often aligns with CIS Benchmarks and complements broader security frameworks such as ISO 27001 or NIST. Tooling and IaC practices aid repeatability and auditable change history.