Rule Sets

Managing Rule Sets

Create custom collections of CIS controls tailored to your organization's specific compliance needs.

What are Rule Sets?

Rule sets are designed to help users track their environment where it matters to them. You can select which controls you want to assess in the rule set and manually select it on each assessment run or select this in a scheduled scan. That way you know that you are not missing none of the important benchmarks for you.

Use case: Create a rule set for "Critical Security Controls" that includes only the most important CIS controls for your organization. Then use this rule set in your regular assessments or scheduled scans to ensure you always check these critical controls.

Log in to ConfigCobra

Access the ConfigCobra application using your credentials.

Navigate to Rule Sets page

Go to the Rule Sets section in the main navigation to manage your custom rule sets.

Go to the Rule Sets page in the main navigation menu.

Create a new rule set

Click the Add New Rule Set button to create a custom collection of controls tailored to your needs.

Here you can create or edit existing rule sets. To create a new one:

Press "Add New Rule Set" in the top right corner
Give a name and a description for your rule set
Select the controls that you want to add into the rule set from the available CIS Benchmarks
Press "Add" to create your rule set

Edit an existing rule set

Modify the name, description, or controls in your rule sets using the edit functionality.

To edit a rule set, press the edit icon on the right side of the desired rule set. You can update the name, description, or modify which controls are included in the rule set.

Delete a rule set

Remove rule sets that are no longer needed from your account.

To delete a rule set, press the delete button on the right of the desired rule set. This action cannot be undone.

Best Practices

Create rule sets based on your compliance requirements (e.g., SOC 2, ISO 27001, GDPR)
Name your rule sets descriptively to easily identify their purpose
Use rule sets in scheduled scans to ensure consistent monitoring of critical controls
Review and update rule sets regularly as your compliance needs evolve

Back to Documentation Learn About Scheduled Scans