Checklist Summary:

This document, CIS Oracle Cloud Infrastructure Foundations Benchmark, provides prescriptive guidance for establishing a secure baseline configuration for the Oracle Cloud Infrastructure environment. The scope of this benchmark is to establish a base level of security for anyone utilizing the included Oracle Cloud Infrastructure services. The benchmark is, however, not an exhaustive list of all possible security configurations and architecture. You should take the benchmark as a starting point and do the required site-specific tailoring wherever needed and when it is prudent to do so. The Compliance Checking script available in the CIS OCI Landing Zone Quick Start (https://github.com/oracle-quickstart/oci-cis-landingzone-quickstart) repository checks a tenancy's configuration against the CIS OCI Foundations Benchmark. To learn more, please visit https://github.com/oracle-quickstart/oci-cis-landingzone-quickstart/blob/main/compliance-script.md. Recommendation compliance can, in many cases, also be audited using REST API. More information about using REST API can be found here: https://docs.oracle.com/en/cloud/saas/enterprise-data-management-cloud/edmra/edmcs_accessing_rest_apis.html To obtain the latest version of this guide, please visit https://www.cisecurity.org/cis-benchmarks/. If you have questions, comments, or have identified ways to improve this guide, please write us at benchmarkinfo@cisecurity.org.

Checklist Role:

• Business Productivity Application
• Virtualization Server

Known Issues:

Not provided.

Target Audience:

This document is intended for system and application administrators, security specialists, auditors, help desk, platform deployment, and/or DevOps personnel who plan to develop, deploy, assess, or secure solutions in the Oracle Cloud Infrastructure.

Target Operational Environment:

• Managed

Testing Information:

Not provided.

Regulatory Compliance:

Not provided.

Comments/Warnings/Miscellaneous:

Not provided.

Disclaimer:

https://www.cisecurity.org/cis-securesuite/cis-securesuite-membership-terms-of-use/

Product Support:

https://www.cisecurity.org/support

Point of Contact:

benchmarkinfo@cisecurity.org

Sponsor:

Not provided.

Licensing:

https://www.cisecurity.org/cis-securesuite/cis-securesuite-membership-terms-of-use/

Change History:

Update publication of the CIS Oracle Cloud Infrastructure Foundations Benchmark v3.0.0 - 02/28/2025
Change Status to Final - 04/16/2025

Dependency/Requirements:

URL	Description

References:

Reference URL	Description

NIST checklist record last modified on 04/16/2025