CIS Controls
CIS Critical Security Controls · Center for Internet Security (CIS) · Official site
Prioritized set of 18 safeguards for defending against the most common cyber attacks. v8.1 (June 2024) aligned the Govern security function with NIST CSF 2.0.
Timeline
CIS CTI team published analysis of an active phishing campaign targeting U.S. state, local, tribal, and territorial (SLTT) organizations. The campaign leverages a custom PowerShell WebSocket RAT and …
CIS CTI team published analysis of malware threat targeting state, local, tribal, and territorial (SLTT) organizations. The analysis documents cases where MS-ISAC members' DNS traffic was directed to…
CIS CTI team analysis and recommendations on vishing threats targeting U.S. State, Local, Tribal, and Territorial (SLTT) organizations. The team assesses that vishing will continue to pose a risk to …
Blog post analyzing recent attacks on water utility systems and extracting five lessons for strengthening cybersecurity and operational resilience in the water sector.
A blog post discussing UK cyber resilience challenges and how CIS SecureSuite can help organizations move from awareness to execution. The article reports on a UK survey indicating that cyber risk is…
CIS published information about the Essential Cyber Hygiene Fundamentals Bootcamp, an educational program designed to help cyber practitioners implement CIS IG1 Safeguards and strengthen organization…
CIS and SAFECode have released an updated version of Secure by Design: A Developer's Guide to Building Safer Software that addresses the role of artificial intelligence in software security practices.
Blog post presenting six key takeaways from a CIS webinar addressing how U.S. State, Local, Tribal, and Territorial (SLTT) agencies can strengthen public safety through collective defense practices.
Blog post discussing how CIS Controls Accreditation is raising global cybersecurity standards and establishing a trusted benchmark for excellence, resilience, and best practices.
CIS has released updates to multiple CIS Benchmarks and CIS Build Kits in June 2026. The announcement highlights major updates but specific benchmark versions, effective dates, and detailed changes a…
A community spotlight article highlighting Diego Bolatti's work advancing CIS Controls adoption for SMEs through research, policy templates, and AI-driven cybersecurity tools. This is an informationa…
Sources we monitor
- CIS blog (monthly Benchmark updates) checked 5 hours, 43 minutes ago
- CIS Critical Security Controls — version status checked 3 days, 7 hours ago