CIS Controls v8

CIS 1 Inventory and Control of Enterprise Assets

Starts in IG1 | Maintain visibility and governance over managed devices and compute assets.

Implementation Actions

  • Automate asset discovery.
  • Assign ownership and criticality.
  • Quarantine unknown assets.

Evidence Examples

  • Asset inventory export
  • Ownership records
  • Unmanaged asset tickets

Suggested Metrics

  • Known-asset coverage
  • Unknown asset remediation time