CIS Controls Implementation Guide
The CIS Controls Implementation Guide was recently released by the Center for Internet Security (CIS), the home of CIS Controls directly mapped to their CIS Controls. It is focused on actionable steps that can be taken right now to assess and improve cyber security posture and preparedness, particularly in small and medium-sized enterprises. Recently a webinar with some team members who helped develop the Implementation Guide was recorded.
The guide focuses on three key areas of
- Know your Environment
- Protect your Assets
- Prepare your Organization
I especially like the questions that are provided in the Implementation Guide.
- Do you know what is connected to your computers and networks?
- Do you know what software is running on your systems and networks?
- Do you set up your computers with security in mind?
- Do you manage who has access to sensitive information or who has extra privileges?
- Is your staff clear about their role in protecting your organization from cyber incidents?
When reviewing these questions, especially for the first time, you may not like your answers very much. I encourage you to use your answers as motivation to apply focused attention to achieve better solutions over the next 30 days. No matter the size of your enterprise, I believe there is something in the Implementation Guide for you!
Subscribe to our email list to get more cybersecurity content delivered to your Inbox!
One thought on “CIS Controls Implementation Guide”