Primary references
Use the original standards below to check terminology and requirements. These references explain the standards; they do not endorse CISGuard or independently verify its product coverage.
← All benchmarks
CIS Internet Explorer 11 Benchmark
CIS Internet Explorer 11 Benchmark, continuously evidenced.
The CIS Microsoft Internet Explorer 11 Benchmark v1.0.0 defines 156 controls covering IE 11 hardening: security zones, ActiveX restrictions, cookie handling, certificate validation, and Group Policy enforcement. While IE 11 has been retired by Microsoft, many enterprise environments retain it for legacy line-of-business applications via Edge IE Mode or standalone IE installations.
BrowserAgentAll plans
Quick Facts
Internet Explorer 11 benchmark at a glance.
- Benchmark version
- v1.0.0
- Total controls
- 156
- Scan type
- Agent
- Available tier
- All plans
- Category
- Browser
- Drift detection
- Yes, between every scheduled scan
Coverage
What this benchmark actually covers.
- Security zones (Internet, Intranet, Trusted, Restricted)
- ActiveX control restrictions
- Cookie handling
- Certificate validation + SSL/TLS settings
- Group Policy enforcement
- Compatibility View settings
Frequently Asked
Internet Explorer 11 questions, answered directly.
IE 11 is retired. Why is this benchmark still relevant?
Microsoft retired IE 11 as a standalone browser, but many enterprise environments retain IE 11 functionality via Edge IE Mode for legacy line-of-business applications. The CIS benchmark applies to both standalone IE 11 installations (still present in some environments) and to Edge IE Mode configurations.
Does this benchmark apply to Edge IE Mode?
Largely yes. Edge IE Mode runs the IE 11 rendering engine within Edge, inheriting most IE 11 configuration. The CIS Edge benchmark covers IE Mode-specific configuration (site lists, IE Mode policies); this IE 11 benchmark covers the underlying IE engine behavior.
Should I plan to retire IE 11 / IE Mode usage?
Yes. Both Microsoft and CIS recommend migrating away from IE 11 functionality. Edge IE Mode is a transitional bridge. For new line-of-business applications, modern Edge or Chrome should be the deployment target. The CIS IE 11 benchmark addresses the existing footprint that organizations need to maintain compliance for during the transition.
Related Benchmarks
Often deployed together with Internet Explorer 11.
Want a Internet Explorer 11 scan of your environment?
Our compliance engineers will scope your environment and quote within one business day of an initial briefing.