The Center for Internet Security (CIS) has published a series of benchmarks for Microsoft products and services