CIS Controls v8.1
What is CIS Controls v8.1?
CIS Critical Security Controls v8.1 (Center for Internet Security, June 2024): 153 prioritised Safeguards in 18 Controls, from asset and software inventory through data protection, secure configuration, accounts and access, vulnerability, log, email, malware, recovery, network, awareness, service provider, application security, incident response and penetration testing. Each Safeguard is tagged with an asset type, one of six security functions (Govern, newly added in v8.1, Identify, Protect, Detect, Respond, Recover) and its Implementation Groups: IG1 is essential cyber hygiene (57 Safeguards in the CIS workbook), IG2 adds 73 for enterprises with more complexity (130), IG3 adds 23 for those facing sophisticated attackers (153). It comprises 153 controls organised across 18 domains, and applies in International.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →Where CIS Controls v8.1 overlaps with the standards you already hold
What CIS Controls v8.1 means in your sector
What CIS Controls v8.1 means for your job
Questions people ask about CIS Controls v8.1
What is CIS Controls v8.1?
How many controls does CIS Controls v8.1 have?
Where does CIS Controls v8.1 apply?
Which version of CIS Controls v8.1 is covered here?
Query CIS Controls v8.1 programmatically
CIS Controls v8.1, its 153 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
CIS Controls v8.1 API reference and MCP config →How ready are you for CIS Controls v8.1?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.