Service Providers | Hosting, Cloud, & Managed Service

The CIS Services Use Agreement allows for the hosting, cloud and/or managed services provider the right to use and distribute the CIS Security Benchmarks resources and CIS Controls internally throughout their organization to secure the organization’s owned system/network(s). In addition, under this membership level, hosting, cloud and/or managed services provider(s) can incorporate the CIS Security Benchmarks resources and CIS Controls into the components of the system/network(s), software, storage, hardware needed to support and secure the hosting, cloud and/or managed service(s) provided to the client(s). Hosting services includes, but is not limited to Software as a Service (SaaS), Platform as a Service (PaaS) and Infrastructure as a Service (IaaS).

 

The CIS Security Benchmark resources may not be sold, re-sold or distributed to the hosting, cloud or managed services client(s).


The CIS Services Use Agreement allows providers:

  • Access to and use of the SB Products and CIS Controls to secure their company’s internal systems;
  • The right to download, install, and use the SB Products and CIS Controls for the sole purpose of supporting their hosting and/or managed services business; and
  • The right to use the CIS Security Benchmarks Name and Logo on reports and related materials prepared for their clients, in accordance with the terms and conditions of the CIS Security Benchmarks Trademarks Use Policy.

 

As a Hosting, Cloud and/or Managed Services Provider, you may state the following:

MEMBER is a hosting/cloud/managed services member of the Security Benchmarks Program at the Center for Internet Security, a nonprofit organization that serves a community of organizations and individuals seeking actionable security resources. As part of this community, MEMBER has access to consensus security configuration benchmarks, software, CIS Controls, metrics, and discussion forums where MEMBER is an integral stakeholder in collaborating on security best practices. MEMBER leverages these resources and best practices to measure and improve the security posture of our systems and our clients’ data.*

 

*CIS does not permit use of language that states that your product/offering/hosting environment has been hardened and secured by CIS Benchmarks.

 

Services Use Pricing

Annual Membership Fees based on Annual Revenue**

Annual Revenue Range

Annual Membership Fee

$1B +

$20,000

$100M-$999M

$15,000

$10M - $99M

$10,000

$1M - $9M

$7,500

$0k - $999K

$5,000

 

** Pricing subject to change. Annual revenue is verified using publicly available information.

Getting Started

A membership agreement is required and all use(s) will be incorporated as applicable to the organization. The term of the membership and the hosting, cloud and managed services use agreement is one year from the date of execution.  A Hosting, Cloud and Managed Services Membership also entitles the company to additional significant benefits described on the Membership page.

Please note that the CIS Security Benchmarks Terms of Use prohibits the public from redistributing the resources and/or from using them for any commercial purposes other than the uses in your membership category.  Also, this is to ensure that members are always working with the latest versions of the CIS Security Benchmarks resources and CIS Controls that have been developed through the CIS consensus process.

 

Enroll Now

To learn more about this membership level and to request a copy of the agreement contact us at members@cisecurity.org.