It seems that the NTP config file checking script has to be updated. Following regular expression can not match the two lines from /etc/ntp.conf
/etc/ntp.conf:
restrict -4 default notrap nomodify nopeer noquery
restrict -6 default notrap nomodify nopeer noquery
Chef Compliance Output:
CIS Specification is" 6.5 Configure Network Time Protocol (NTP) (Scored)"
The regular expression does not take care of swapped option strings.