Stay organized with collections
Save and categorize content based on your preferences.
This document describes the level of compliance that
Google Distributed Cloud has with the CIS Container-Optimized OS Benchmark. The Benchmark is a set of recommendations for configuring instances that use Container-Optimized OS to support a strong security posture.
Access the benchmark
The CIS Container-Optimized OS Benchmark is available on the CIS website:
Search for CIS Google Container-Optimized OS Benchmark.
Click Download PDF.
Recommendation levels
The following table describes the recommendation levels for the
CIS Container-Optimized OS Benchmark.
Level
Description
Level 1
Recommendations at this level are meant to be applicable to the majority of environments.
Level 2
Extends the Level 1 profile, resulting in a more stringent security environment.
Status of Google Distributed Cloud
The Container-Optimized OS images used with Google Distributed Cloud are hardened to meet the CIS Level 1 - Server profile. All Google Distributed Cloud components pass the recommendations for this level.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[],[],null,["This document describes the level of compliance that\nGoogle Distributed Cloud has with the CIS [Container-Optimized OS](https://cloud.google.com/container-optimized-os/docs/concepts/features-and-benefits) Benchmark. The Benchmark is a set of recommendations for configuring instances that use Container-Optimized OS to support a strong security posture.\n\nAccess the benchmark\n\nThe CIS Container-Optimized OS Benchmark is available on the CIS website:\n\n- Go to the [CIS Benchmarks downloads page](https://downloads.cisecurity.org).\n- Search for **CIS Google Container-Optimized OS Benchmark**.\n- Click **Download PDF**.\n\nRecommendation levels\n\nThe following table describes the recommendation levels for the\nCIS Container-Optimized OS Benchmark.\n\n| Level | Description |\n|---------|-------------------------------------------------------------------------------------------|\n| Level 1 | Recommendations at this level are meant to be applicable to the majority of environments. |\n| Level 2 | Extends the Level 1 profile, resulting in a more stringent security environment. |\n\nStatus of Google Distributed Cloud\n\nThe Container-Optimized OS images used with Google Distributed Cloud are hardened to meet the CIS Level 1 - Server profile. All Google Distributed Cloud components pass the recommendations for this level."]]
