CIS Scans best approach in 2.5.6

Rancher 2.x
1

What is the best approach for CIS scans to run is to install the rancher CIS benchmark from GUI or to manually install it on each cluster