Cybersecurity glossary
What is CIS Controls?
Also known as: CIS Critical Security Controls, IG1
Definition
The CIS Critical Security Controls are a prioritized set of security safeguards from the Center for Internet Security, grouped into Implementation Groups, with IG1 as a baseline for small organizations.
Why it matters
Each safeguard is specific and actionable, such as maintaining an inventory of enterprise assets or using MFA for externally exposed applications. That makes the Controls a practical task list alongside broader frameworks like NIST CSF.
Common questions about CIS Controls
See also
Sources
Related Guides
GuideSmall Business Security
Business Email Compromise: How It Works and How to Stop It
Learn how business email compromise attacks target finance teams and discover concrete controls, verification rules, and policies to protect your company.
Read more GuideGRC
NIST AI RMF: Implementation Guide for Small Teams
Learn how small teams can implement the NIST AI RMF to assess risk, govern deployments, and deploy artificial intelligence safely without enterprise overhead.
Read more GuideSmall Business Security
Small Business Cybersecurity Checklist: The Core Controls
A practical small business cybersecurity checklist covering access controls, patching, backups, encryption, and network defense to secure your business.
Read more GuideSmall Business Security
How to Write an Incident Response Plan Small Business Owners Use
Learn how to write an incident response plan small business teams can execute quickly. Protect operations, contain threats, and recover critical systems.
Read more