All 18 CIS Controls
CIS 1
Inventory and Control of Enterprise Assets
Starts in IG1CIS 2
Inventory and Control of Software Assets
Starts in IG1CIS 3
Data Protection
Starts in IG1CIS 4
Secure Configuration of Enterprise Assets and Software
Starts in IG1CIS 5
Account Management
Starts in IG1CIS 6
Access Control Management
Starts in IG1CIS 7
Continuous Vulnerability Management
Starts in IG1CIS 8
Audit Log Management
Starts in IG2CIS 9
Email and Web Browser Protections
Starts in IG1CIS 10
Malware Defenses
Starts in IG1CIS 11
Data Recovery
Starts in IG1CIS 12
Network Infrastructure Management
Starts in IG2CIS 13
Network Monitoring and Defense
Starts in IG2CIS 14
Security Awareness and Skills Training
Starts in IG2CIS 15
Service Provider Management
Starts in IG2CIS 16
Application Software Security
Starts in IG2CIS 17
Incident Response Management
Starts in IG2CIS 18
Penetration Testing
Starts in IG3