Gayle is searching for a secure configuration benchmark for Linux that can be adopted by her organization. Which of the following companies would provide a helpful, commonly accepted benchmark that she could use?

The Center for Internet Security (CIS) offers numerous benchmarks for various operating systems, applications, servers, and other areas. Microsoft provides benchmarks solely for their own operating systems and does not provide any for Linux. NIST does not provide benchmarks, but the National Security Agency (NSA) does offer them.