Skip to main content
MSPortal.ai comes with many built-in checks from CIS, the Center for Internet Security. Add them to your tenant from the Playbooks catalog, then find them in your compliance checks and groups.
1

Open the CIS Benchmarks catalog

Go to Settings > Compliance > Playbooks. Click Security Frameworks, then CIS Benchmarks. Search for the product you need, or browse the operating systems, browsers, cloud and infrastructure sections. You can select one benchmark or several.
2

Select the levels you want

Most benchmarks come as L1 (Level 1) and L2 (Level 2) entries, and some offer a Full entry. Level 1 is essential hardening with little impact on day-to-day use. Level 2 adds stricter settings for high-security environments. These are CIS Benchmark profiles, not CIS Controls Implementation Groups (IG1 and IG2).To add both levels, select both entries and click Add to Tenant in the header. To add a single entry, click Add on its row. An Imported badge means the benchmark is already in your tenant.
CIS benchmark catalog showing one product with separate L1 and L2 entries

One product with separate L1 and L2 entries.

3

Choose a status list and add to tenant

The Add Playbooks to Tenant dialog opens. For each selected benchmark:
  1. Review the Folder the checks will be added to.
  2. Choose a Status list. If your tenant has only one status list, it is already selected.
  3. Review the suggested Device types. Selected device types receive the imported check group automatically. Remove any type you don’t want to target.
Click Add to Tenant.
If a benchmark is already in your tenant, the dialog says so. Adding it again adds only checks the tenant does not already have to the existing group; it does not create a second copy or overwrite edited checks. If a multi-benchmark import fails partway, you can retry it: benchmarks that already imported are not copied twice.
4

Go to Compliance

Go to Settings > Compliance.
5

Open Groups

The checks have all been added. Open the Groups tab to see the new check groups.
6

Open a group to see its checks

Click a group to see which checks were added.
7

Review the added checks

In this example, many checks were added for CIS Apple iOS 18.
Adding a benchmark imports its checks. It does not change device settings or mark a company compliant. Set up groups, runs and company scope in Compliance settings.