diff --git a/README.md b/README.md
index 85878b65..1f0ea76b 100644
--- a/README.md
+++ b/README.md
@@ -6,7 +6,9 @@
Read the [change log](https://github.com/falcosecurity/falco/blob/dev/CHANGELOG.md)
Dev Branch: [](https://travis-ci.org/falcosecurity/falco)
-Master Branch: [](https://travis-ci.org/falcosecurity/falco)
+Master Branch: [](https://travis-ci.org/falcosecurity/falco)
+CII Best Practices: [](https://bestpractices.coreinfrastructure.org/projects/2317)
+
## Overview
Falco is a behavioral activity monitor designed to detect anomalous activity in your applications. Powered by [sysdig’s](https://github.com/draios/sysdig) system call capture infrastructure, Falco lets you continuously monitor and detect container, application, host, and network activity... all in one place, from one source of data, with one set of rules.