cis controls

Discovering CIS Controls in 2023: Exploring Guide To Robust Security
Introduction: Why You Can’t Ignore CIS Controls in 2023 In today’s digital landscape, the rising cybersecurity threats targeting small businesses are more alarming than ever. As depicted in the bar chart, the ...
Neither Pointless Nor Boring: Pop It and Lock It Down with CIS Controls
I’m delighted to share that I will be speaking for the first time at SecTor this year. The talk will be in Theatre 1 at 1:15pm on October 5th. In the session ...

Center for Internet Security (CIS) Controls v8: Your Complete Guide to the Top 18
The Center for Internet Security (CIS) controls are a relatively short list of high-priority, highly effective defensive actions that provide a “must-do, do-first” starting point for every enterprise seeking to improve its ...
CIS Control 18 Penetration Testing
Penetration testing is something that more companies and organizations should be considering a necessary expense. I say this because over the years the cost of data breaches and other forms of malicious ...
CIS Control 17: Incident Response Management
We all know that it is a question of when you will be compromised and not if you will be compromised. It is unavoidable. The goal of CIS Control 17 is to ...
CIS Control 15: Service Provider Management
Enterprises today rely on partners and vendors to help manage their data. Some companies depend on third-party infrastructure for day-to-day operations, so understanding the regulations and protection standards that a service provider ...
The New CIS Community Defense Model (CDM) Brings Security Within the Grasp of All Small Organizations
Part of operating an effective security program is the ability to never rest upon any previous success. When guarding against an adversary, yesterday’s success is quickly eclipsed by the dynamic shift in the ...
How to Fulfill Multiple Compliance Objectives Using the CIS Controls
Earlier this year, I wrote about what’s new in Version 8 of the Center for Internet Security’s Critical Security Controls (CIS Controls). An international consortium of security professionals first created the CIS ...

Behind the Community Defense Model with the Center for Internet Security (CIS)
In this episode, Curtis Dukes, executive vice president and general manager of the Center for Internet Security (CIS), explains the need for their Community Defense Model. He also details their process for ...
CIS Control 13: Network Monitoring and Defense
Networks form a critical core for our modern-day society and businesses. People, processes, and technologies should be in place for monitoring, detecting, logging, and preventing malicious activities that occur when an enterprise ...