CIS offers a variety of free resources,[20] which include "secure configuration benchmarks, automated configuration assessment tools and content, security metrics and security software product certifications".[4]