What are the Center for Internet Security (CIS) Controls?

What are the Center for Internet Security (CIS) Controls?

The Center for Internet Security (CIS) Controls are a set of best practices for securing IT systems and data. They are comprised of 20 different controls, divided into three categories: Basic, Foundational, and Organizational.

Basic Controls: These are the most basic security measures that organizations should take to protect their systems and data. They focus on protecting against common security threats, such as malware and phishing.

Foundational Controls: These are more advanced security measures that organizations should take to further protect their systems and data. They focus on protecting against more sophisticated threats, such as advanced persistent threats.

Organizational Controls: These are the most comprehensive security measures that organizations should take to ensure the security of their systems and data. They focus on protecting against the most advanced threats, such as nation-state attacks.

The CIS Controls are designed to provide organizations with a comprehensive set of security measures that can be implemented to protect their systems and data. They are regularly updated to ensure that organizations are able to keep up with the latest threats and security trends.