What are the basic CIS controls?

What are the basic CIS controls?

1. Inventory and Control of Hardware Assets: This involves maintaining an accurate inventory of all hardware assets, including the serial numbers of each device, and controlling access to them. This can be done through physical security measures, such as locks, as well as software-based access control systems.

2. Continuous Vulnerability Management: This involves regularly scanning systems for vulnerabilities and patching them as soon as possible. This can be done using automated scanning tools, as well as manual reviews.

3. Controlled Use of Administrative Privileges: This involves restricting the use of administrative privileges to only those individuals who need them for their job. This can be done through user access control systems, as well as regular audits of who has access to what.

4. Configuration for Hardware and Software on Mobile Devices, Laptops and Servers: This involves ensuring that all devices are properly configured to meet the organization’s security requirements. This can be done through automated configuration management tools, as well as manual reviews.

5. Maintenance, Monitoring and Analysis of Audit Logs: This involves regularly monitoring and analyzing audit logs to detect any suspicious or anomalous activity. This can be done through automated log analysis tools, as well as manual reviews.