OtherInternational
CIS Controls v8
What is CIS Controls v8?
Center for Internet Security Critical Security Controls - prioritized set of actions to protect organizations and data from known cyber attack vectors. It comprises 153 controls organised across 18 domains, published by CIS, and applies in International.
How CIS Controls v8 maps to other frameworks
All 153 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 18 domains CIS Controls v8 groups its controls into
CIS Control 8: Audit Log Management
CIS Control 10: Malware Defenses
CIS Control 12: Network Infrastructure Management
CIS Control 16: Application Software Security
CIS Control 13: Network Monitoring and Defense
Where CIS Controls v8 overlaps with the standards you already hold
Step-by-step implementation of CIS Controls v8
More CIS Controls v8 comparisons
Analysis of CIS Controls v8
How to Execute AWS Security Hub Multi-Account Integration with CIS Controls v8 Implementation for Centralized Cloud Security MonitoringOrganizations managing multiple AWS accounts need centralized security monitoring that aligns with established cybersecurity frameworks like CIS Controls v8. AWS Security Hub provides the foundation for unified security posture management when properly integrated with systematic control implementation across cloud environments.
CIS Controls v8 Implementation Strategy for PCI DSS v4.0 Compliance: Complete Control Mapping and Resource Optimization FrameworkOrganizations seeking PCI DSS v4.0 compliance can leverage existing CIS Controls v8 implementations to achieve significant efficiency gains and cost reductions. This detailed mapping analysis demonstrates how 89% of PCI DSS requirements align with CIS Controls, providing a strategic roadmap for dual-framework compliance.
CIS Controls v8 Implementation Roadmap for NIST Cybersecurity Framework 2.0 Alignment: Complete Technical Control MappingOrganizations implementing NIST CSF 2.0 can leverage CIS Controls v8 as their primary technical control framework through systematic mapping and implementation. This comprehensive guide provides the specific control alignments and implementation priorities for achieving measurable cybersecurity outcomes.
Container Security Orchestration Using CIS Kubernetes Benchmark v1.8: Automated Control Implementation for Production EnvironmentsThe CIS Kubernetes Benchmark v1.8 provides comprehensive security hardening guidance for Kubernetes container orchestration platforms across master nodes, etcd, worker nodes, and policies. This technical implementation guide demonstrates automated control deployment using Infrastructure as Code approaches that integrate with DevSecOps pipelines for continuous compliance validation.
What CIS Controls v8 means in your sector
What CIS Controls v8 means for your job
Questions people ask about CIS Controls v8
What is CIS Controls v8?
Center for Internet Security Critical Security Controls - prioritized set of actions to protect organizations and data from known cyber attack vectors.
How many controls does CIS Controls v8 have?
CIS Controls v8 contains 153 controls organized across 18 domains.
Where does CIS Controls v8 apply?
CIS Controls v8 is applicable in International. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
What frameworks does CIS Controls v8 map to?
CIS Controls v8 has control-to-control mappings with 2 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.
How do I get started with CIS Controls v8 compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.
Query CIS Controls v8 programmatically
CIS Controls v8, its 153 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
CIS Controls v8 API reference and MCP config →What CIS Controls v8 requires, control by control
Each page carries the requirement text for one CIS Controls v8 control and what an assessor expects to see as evidence.
- CIS-1-1 Establish and Maintain Detailed Enterprise Asset Inventory
- CIS-1-2 Address Unauthorized Assets
- CIS-1-3 Utilize an Active Discovery Tool
- CIS-1-4 Use Dynamic Host Configuration Protocol (DHCP) Logging to Update Enterprise Asset Inventory
- CIS-1-5 Use a Passive Asset Discovery Tool
- CIS-10-1 Deploy and Maintain Anti-Malware Software
- CIS-10-2 Configure Automatic Anti-Malware Signature Updates
- CIS-10-3 Disable Autorun and Autoplay for Removable Media
- CIS-10-4 Configure Automatic Anti-Malware Scanning of Removable Media
- CIS-10-5 Enable Anti-Exploitation Features
How much of another standard CIS Controls v8 already covers
Each crosswalk is judged control by control, and the mappings that were rejected are kept alongside the ones that held.
- ACSC Essential Eight to CIS Controls v8 crosswalk
- ANSSI Guide d'hygiene informatique (42 mesures, v2.0) to CIS Controls v8 crosswalk
- APRA CPS 234 to CIS Controls v8 crosswalk
- ASD Strategies to Mitigate Cyber Security Incidents to CIS Controls v8 crosswalk
- Australia Consumer Data Right - Banking (CDR) to CIS Controls v8 crosswalk
- Australia My Health Records Act 2012 to CIS Controls v8 crosswalk
- AWS Well-Architected Security Pillar to CIS Controls v8 crosswalk
- Azure Security Benchmark to CIS Controls v8 crosswalk
How ready are you for CIS Controls v8?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .