Addigy's pre-built compliance baselines and benchmarks let you apply CIS, DISA STIG, Cyber Essentials, CMMC, and NIST rules across your fleet in a few clicks. Most organizations find the full rule set stricter than they need — cloning a benchmark lets you keep only the rules that fit your requirements, while still receiving Addigy's automatic updates when the official specs change.
Overview
A cloned baseline or benchmark is your own editable copy of an Addigy pre-built baseline or benchmark. You choose which rules it contains, name it, and assign it to policies like any other benchmark.
- What it does: Creates a customizable copy of a pre-built benchmark containing only the rules you select.
- Who it's for: Administrators who need to meet a compliance standard but can't adopt every rule in it — for example, because a rule conflicts with how their users work.
- Key benefit: Cloned benchmarks continue to use Addigy-managed rules. When CIS or NIST revise a rule you've included, your clone picks up the change automatically — you don't maintain the rule logic yourself.
Prerequisites
- An active Addigy Security Suite subscription. Pre-built benchmarks are included with Security Suite.
- An Addigy user account with access to the Catalog.
- A policy to assign the finished benchmark to.
How to Clone a Pre-built Baseline or Benchmark
- Navigate to Catalog > Compliance.
- Select the pre-built benchmark you want to base your copy on, then select Clone...
- Review the rule list and select only the rules you want to include.
- Give the clone a clear, specific name — for example,
CIS Level 1 - Finance (no FileVault). You may end up with several variants, and the name is how you'll tell them apart later. - Click Save.
Your cloned benchmark now appears under Your Custom Benchmarks and can be assigned to any policy.
How to Assign a Cloned Benchmark to a Policy
- Click the Actions tab > Policies... and select the target policies.
Frequently Asked Questions
Do cloned benchmarks stay up to date?
Yes. Clones use Addigy-managed rules, so revisions to the official CIS or NIST rules you've included are applied automatically. You don't need to re-clone after a spec update.
Can I add rules to a clone after saving it?
Yes — reopen the cloned benchmark and adjust its rule selection. Changes apply to every policy the benchmark is assigned to.
What if I need a rule that isn't in any pre-built benchmark?
Create a custom rule and assign it alongside your clone. See How to Manage Device Compliance with Addigy. Use official rules wherever possible, since those are the ones Addigy keeps updated for you.
Can I clone an iOS benchmark?
iOS benchmarks work differently from macOS benchmarks — they deploy a profile, and monitoring is based on whether that profile deployed successfully. See iOS Compliance Benchmarks before assuming the macOS workflow applies.
Should I choose Monitor & Enforce or Monitor-Only?
Monitor & Enforce enforces compliance by running scripts or installing profiles as needed. Monitor-Only runs the same tests but doesn't fix anything, and is the safer choice for a first rollout.