CISControls

The CIS Controls are a prioritized set of cybersecurity best practices designed to help organizations defend against the most prevalent cyber threats. Developed and maintained by the Center for Internet Security (CIS), these controls are widely recognized and adopted globally. They are organized into Implementation Groups (IGs) to help organizations of varying resources and maturity levels implement them effectively.

The CIS Controls are categorized into three IGs: IG1, IG2, and IG3. IG1 represents the basic cyber hygiene that all organizations should implement. IG2 builds upon IG1, offering more advanced safeguards for organizations with a greater need for protection. IG3 contains the most comprehensive controls, suitable for organizations facing significant cyber risks.

The controls cover a range of critical security domains, including asset management, access control, continuous vulnerability management, and incident response. By focusing on these foundational safeguards, organizations can significantly reduce their attack surface and improve their overall security posture. The CIS Controls are regularly updated to reflect the evolving threat landscape, ensuring their continued relevance and effectiveness. They are often used as a framework for compliance with various regulations and standards.