Lion Cipher Lab

Audit a Linux box against a CIS benchmark with OpenSCAP

• GRC / Compliance
• Intermediate
• ~50 min
• Free · no account required

Why it matters

Compliance frameworks (CIS, DISA STIG, PCI-DSS) are often experienced as PDFs someone reads and argues about in a meeting. That's the slow, error-prone way. OpenSCAP turns a benchmark into an automated scan: point it at a machine and it tells you, rule by rule, what passes and what fails, with the rationale and the fix. This is how real GRC and security-engineering teams measure a hardening baseline continuously instead of auditing by hand once a year — and it's a skill that shows up on the job the first week.

What you'll learn

• compliance automation
• CIS benchmarks
• SCAP
• reading an audit report
• hardening baselines

Steps in this lab

1. What SCAP, OpenSCAP, and CIS actually are
2. Install OpenSCAP and the content
3. See which profiles are available
4. Run the scan and produce a readable report
5. Read the report like an auditor, not a robot
6. Remediate safely, and know the limits of a benchmark

Open the full interactive lab →