What are the CIS Controls?
Short answer
The CIS Critical Security Controls are a prioritized set of security safeguards published by the Center for Internet Security. They are grouped into Implementation Groups, and IG1 is described by CIS as essential cyber hygiene, a practical baseline for small organizations.
The details
Because each safeguard is specific, the CIS Controls are useful for turning a framework such as NIST CSF into a concrete task list.
Terms explained
- CIS Controls
- The CIS Critical Security Controls are a prioritized set of security safeguards from the Center for Internet Security, grouped into Implementation Groups, with IG1 as a baseline for small organizations.
- NIST Cybersecurity Framework
- The NIST Cybersecurity Framework (CSF) 2.0 is voluntary guidance for managing cybersecurity risk, organized into six functions: Govern, Identify, Protect, Detect, Respond and Recover.
Sources
Related questions
Related Guides
GuideGRC
10 Ways to Protect PII in Your Organization
Learn how to protect PII across systems using practical safeguards, impact assessments, access controls, and retention rules for privacy teams.
Read more GuideGRC
8 Essential Small Business Security Policies to Protect Operations
Establish baseline defense with 8 essential small business security policies covering backups, access control, patching, incident response, and AI use.
Read more GuideGRC
NIST AI RMF: Implementation Guide for Small Teams
Learn how small teams can implement the NIST AI RMF to assess risk, govern deployments, and deploy artificial intelligence safely without enterprise overhead.
Read more GuideGRC
8 AI Vendor Risk Assessment Questions for Your Business
Review these 8 essential AI vendor risk assessment questions before adopting third-party artificial intelligence tools to protect your business data.
Read more