Release Schedule

CIS

CIS (Center for Internet Security) releases developed security configurations and best practices that the community validates. There is no official schedule, although CIS tends to release new or updated benchmarks in a draft format, which individuals can subscribe to prior to an official release.

STIG

STIG (Security Technical Implementation Guide) releases are developed by vendors in conjunction with requirements from DISA. DISA releases STIG updates on a quarterly schedule.

Playbook Releases

We aim to release updated remediation roles to subscribers within 30 days of the vendor release. Timing depends on the number of changes; new benchmarks often take significantly longer. Public releases typically follow the subscriber release by about three months, so public releases have followed the vendor release by roughly three to five months.

Example

Illustrative release schedule for an updated benchmark (hypothetical dates, not an actual release)

Benchmark	Vendor Release	Subscriber release	Public Release
RHEL10-STIG	27th January	27th February	27th May

To become a subscriber, visit Lockdown Enterprise.