Template creation for CIS Benchmark in Compliance Manager

%3CLINGO-SUB%20id%3D%22lingo-sub-1435284%22%20slang%3D%22en-US%22%3ETemplate%20creation%20for%20CIS%20Benchmark%20in%20Compliance%20Manager%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1435284%22%20slang%3D%22en-US%22%3E%3CDIV%20class%3D%22thread-message-content-body-text%20thread-full-message%22%3E%3CP%20class%3D%22%22%3EHello%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20can't%20find%20any%20template%20for%20the%20CIS%20Benchmark%20in%20Microsoft%20Score%20and%20its%20%22engine%22%2C%20Compliance%20Manager.%20So%20I%20decided%20to%20create%20a%20template%20to%20implement%20all%20controls%20of%20the%20CIS%20Benchmark%20in%20Compliance%20Manager.%3C%2FP%3E%3CP%3EUnfortunately%2C%20the%20documentation%20to%20create%20a%20template%20is%20a%20bit%20simple%20and%20doesn't%20explain%20many%20things%20about%20the%20link%20between%20actions%2C%20controls%20and%20dimensions.%20I%20finally%20succeeded%20creating%20a%20basic%20template%2C%20that%20uses%20an%20action%20created%20by%20another%20template%20(%22enable%20mutil-factor%20authentication%20for%20Admins%22%2C%20created%20by%20Dubai%20ISR).%20But%20now%2C%20my%20template%20is%20in%20a%20%22pending%20approval%22%20status%20and%20I%20can't%20see%20it%20in%20the%20template%20list%20(while%20creating%20an%20assessment)%2C%20and%20I%20can't%20change%20it%20to%20%22approved%22%20state.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnother%20point%20is%20%3A%20how%20to%20use%20the%20actions%20%3F%20If%20I%20use%20an%20already%20created%20action%20(referenced%20in%20a%20default%20template%2C%20for%20instance%20%3A%20Dubai%20ISR)%2C%20do%20I%20have%20to%20indicate%20this%20in%20the%20column%20%22actionDescriptionTitle%22%20%3F%20What%20does%20it%20do%20if%20I%20don't%20indicate%20this%20%3F%20And%2C%20why%20are%20the%20default%20template%20in%20french%20when%20I%20export%20them%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnother%20point%20to%20go%20%3A%20I%20tried%20to%20download%20the%20template%20of%20Dubai%20ISR%2C%20%22clean%20it%22%20to%20keep%20only%20what%20I%20need%2C%20change%20the%20name%20of%20the%20template...%20and%20then%2C%20upload%20it%20as%20a%20custom%20template.%20But%20I%20encountered%20errors%20like%20%22action%20unknown%22%2C%20while%20it%20is%20a%20action%20that%20comes%20from%20the%20initial%20template%20!!!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWell%2C%20the%20Compliance%20Manager%20is%20a%20bit%20a%20pain%20to%20handle.%20Does%20anyone%20have%20a%20better%20link%20to%20explain%20how%20to%20create%20a%20template%20%3F%20Can%20anyone%20teach%20me%20how%20to%20use%20all%20this%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks.%3C%2FP%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hello,

 

I can't find any template for the CIS Benchmark in Microsoft Score and its "engine", Compliance Manager. So I decided to create a template to implement all controls of the CIS Benchmark in Compliance Manager.

Unfortunately, the documentation to create a template is a bit simple and doesn't explain many things about the link between actions, controls and dimensions. I finally succeeded creating a basic template, that uses an action created by another template ("enable mutil-factor authentication for Admins", created by Dubai ISR). But now, my template is in a "pending approval" status and I can't see it in the template list (while creating an assessment), and I can't change it to "approved" state.

 

Another point is : how to use the actions ? If I use an already created action (referenced in a default template, for instance : Dubai ISR), do I have to indicate this in the column "actionDescriptionTitle" ? What does it do if I don't indicate this ? And, why are the default template in french when I export them ?

 

Another point to go : I tried to download the template of Dubai ISR, "clean it" to keep only what I need, change the name of the template... and then, upload it as a custom template. But I encountered errors like "action unknown", while it is a action that comes from the initial template !!!

 

Well, the Compliance Manager is a bit a pain to handle. Does anyone have a better link to explain how to create a template ? Can anyone teach me how to use all this ?

 

Thanks.