Auditing for Policy Compliance with QualysGuard and CIS Benchmarks

This paper will guide a user through the creation of Policy Compliance tests within the QualysGuard Policy Compliance module. A focus on the Windows 2008 Centre for Internet Security benchmark will be followed for these tests, though the process and concepts can be applied to any technology supported by the QualysGuard Policy Compliance module. Creation of reporting templates for ongoing reporting of compliance status will be covered. The ability to flag an audit exception as acceptable will be introduced and demonstrated.