CIS Controls
What is CIS Controls?
A prioritized set of cybersecurity best practices developed by the Center for Internet Security to help organizations defend against common cyber threats.
Terms that appear alongside cis controls
Each of these is named in at least one of the same controls as cis controls. The number is how many controls name both.
- nist 6 shared controls
- cybersecurity 5 shared controls
- iso 27001 4 shared controls
- audit 3 shared controls
- compliance 3 shared controls
- vulnerability 2 shared controls
- mitre 2 shared controls
- cybersecurity framework 2 shared controls
Frameworks that govern cis controls
What the standards actually require on cis controls
Requirements naming cis controls across 6 standards, quoted from the control text.
Apply ATT&CK Mitigations (M-IDs) for prevention and risk reduction. M1015 Active Directory Configuration + M1018 User Account Management + M1027 Password Policies + M1056 Account Use Policies + M1017 User Training + M1036 Account Use Policies + M1042 Disable o...
MITRE-ATTACK-Mitigations-M-IDs-Active-Directory-User-Account-Management-Password-Policies-Network-Segmentation · MITRE ATT&CK Mitigations + M-IDs + Active Directory + User Account + Password + Network Segmentation + Application Control →Coordination positions IRS Pub 1075 within the broader US federal + state + and industry security landscape. (1) NIST Standards: NIST SP 800-53 Rev 5 (primary control set incorporated by reference Section 9.3) + NIST SP 800-53A (assessment methodology) + NIST...
IRSPub1075-CoordNIST80053-FedRAMP-FISMA-CJIS-SSACDS-StateRevAgencies-PrivacyAct-SOC2-Industry · IRS Pub 1075 Coordination - NIST SP 800-53 Rev 5 + FedRAMP + FISMA + 26 USC 6103 + FBI CJIS + SSA CDS + State Revenue Agencies + Privacy Act + SOC 2 + Industry Frameworks + Federal Sectoral →ISMAP Assessment positions ISMAP within the comprehensive Japanese and international cloud security regulatory landscape. (1) External Assessment by ISMAP-Approved Auditor: CSP must undergo annual third-party assessment by an audit organisation on the ISMAP Pr...
ISMAP-Assessment-ExternalAuditor-AnnualReview-CustomerTransparency-Coord-FedRAMP-IRAP-GCloud-PIPA-ISO27017 · ISMAP Assessment - External ISMAP-Approved Auditor + Annual Review + Customer Information and Transparency + Coordination FedRAMP/UK G-Cloud/Australia IRAP/Singapore MTCS + ISO 27017 + PIPA + Japan Digital Agency →Audit + Drills + Training operationalise the Directions through ongoing assurance + cyber preparedness. (1) CERT-In Cyber Security Audit: organisations should undergo periodic cyber security audit by CERT-In Empanelled Information Security Auditing Organisatio...
CERTIN-Audit-Drills-Training-AwarenessProgram-CERTInExercises-CISO · CERT-In Audit + Cyber Security Drills + Training + Awareness + CERT-In Cyber Exercises + CISO + Information Security Auditor Empanelment →Each SIG release is mapped to reference documents so one response can serve several frameworks: the 2024 SIG carries direct mappings to 27 reference documents in the content library (among them the 2024 SCA, ISO/IEC 27001 and 27002:2022, ISO/IEC 27701, NIST AI...
sig-shared-assessments::U4 · Use SIG mapping references and keep the questionnaire on the current release →Third-party suppliers are assessed remotely, by inspection and audit, or both, with sample checks where questionnaires are relied on; ONR interventions are sampling and do not replace the dutyholder's own due diligence.
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.2-TPA · CS&IA assessment of third-party suppliers →Questions people ask about cis controls
What is CIS Controls?
Why is CIS Controls important for compliance?
Which compliance frameworks address CIS Controls?
Where can I learn more about CIS Controls?
See how CIS Controls applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.