What Is It?
CIS (Center for Internet Security) is a nonprofit organization focused on enhancing cyber security for both the private and public sector through collaboration. They have provided a security benchmarking tool which can be used to discover potential configuration weaknesses in your systems before they escalate into more severe problems. DoIT can provide assistance running the tool or interpreting results.
Where can I get it?
https://www.cisecurity.org/cybersecurity-tools/cis-cat-pro