IT Security Benchmarking: the CIS Benchmarks

The Center for Internet Security, or CIS provides a variety of publicly available benchmarks which can provide an excellent foundation for your own organization's technical security standards. Perhaps more interesting, they also work to develop new benchmarks for various platforms, systems, and software packages. At the moment, an iPhone benchmark is in progress, with version 1.0 for iPhone software version 2.2 in progress right now.

The CIS toolkit also includes a variety of scoring tools, and mailing lists for each benchmark, including those in development.