What’s New in the Docker and Kubernetes CIS Benchmarks

**Executive summary:** This article outlines recent updates to the CIS Benchmarks—Docker Benchmark v1.3 adds recommendations such as running the Docker daemon rootless and securing ContainerD file permissions, while the Kubernetes v1.20 Benchmark introduces version-specific guidance and new RBAC controls addressing the risky system:masters membership and verbs (impersonate, escalate, bind); it also notes new distribution-specific benchmarks (AKS, OpenShift), points to community contribution via the CIS WorkBench, and mentions kube-bench as an implementation tool.