diff --git a/roles/rke2_common/tasks/cis-hardening.yml b/roles/rke2_common/tasks/cis-hardening.yml
index f85baa5..5553a8a 100644
--- a/roles/rke2_common/tasks/cis-hardening.yml
+++ b/roles/rke2_common/tasks/cis-hardening.yml
@@ -1,7 +1,7 @@
 ---
 - name: CIS MODE
   become: yes
-  when: rke2_config.profile | default("") | regex_search('cis-\\d+.\\d+')
+  when: rke2_config.profile | default("") | regex_search('^cis(-\\d+.\\d+)?$')
   block:
 
     - name: Create etcd group