Standards · Governance and coordination
CIS Controls v8.1 CIS Critical Security Controls
PublishedFree ·
Summary
The Center for Internet Security controls are a set of eighteen prioritised defensive measures, broken down into concrete safeguards, from inventory of devices and software to secure configuration, access and vulnerability management, backups, training and incident response. They are organised into three implementation groups (IG1, IG2, IG3) according to the organisation’s resources and risk: IG1 is the “essential cyber hygiene” designed for small businesses. They are mapped to the main frameworks, such as NIST CSF, ISO/IEC 27001 and PCI DSS.
Related laws and documents
Related standards
Metadata and summary: CC BY 4.0 · JSON