The Center for Internet Security (CIS) is a nonprofit organization established in 2000 that brings together public and private sector partners to advance cybersecurity readiness and response for organizations worldwide. CIS is best known for developing the CIS Controls and CIS Benchmarks, which are globally recognized best practices and standards for securing IT systems and data against pervasive cyber threats. The organization operates the Multi-State Information Sharing and Analysis Center (MS-ISAC), which serves as the primary resource for cyber threat prevention, protection, response, and recovery for U.S. state, local, tribal, and territorial governments. Through collaborative efforts, CIS provides secure configuration benchmarks, security automation content, and a range of cybersecurity resources to help organizations of all sizes achieve their security goals, fostering a trusted environment for information sharing and proactive defense against emerging threats.
This document is a comprehensive guide developed by the Center for Internet Security (CIS) in collaboration with SAFECode and a community of experts. It provides a practical, evaluable framework to… Read More »CIS Secure by Design: A Guide to Assessing Software Security Practices ★★★★★
The CIS Controls Internet of Things (IoT) Companion Guide provides detailed guidance on how to apply the cybersecurity best practices of the CIS Controls, particularly Version 8.1, to IoT environments.… Read More »CIS Controls Internet of Things Companion Guide ★★★★★
CIS Controls v8.1 introduced significant updates to align with NIST Cybersecurity Framework (CSF) 2.0, including the addition of a dedicated “Governance” security function to address organizational oversight and compliance requirements.… Read More »CIS Controls v8.1 Mapping to NIST CSF 2.0
CIS Critical Security Controls v8 (CIS CSC v8) is a comprehensive cybersecurity framework developed by the Center for Internet Security to help organizations defend against modern cyber threats. Version 8… Read More »CIS Critical Security Controls Version 8 ★★★★★
The CIS Software Supply Chain Security Guide, developed in collaboration with Aqua Security, offers over 100 foundational security recommendations aimed at safeguarding the software supply chain across various technologies and… Read More »CIS Software Supply Chain Security Guide
The CIS Controls Cloud Companion Guide v8 provides detailed guidance on applying the security best practices from CIS Controls version 8 to cloud environments from the consumer or customer perspective.… Read More »CIS Controls Cloud Companion Guide v8
CIS Benchmarks are comprehensive, consensus-driven security guidelines developed by the Center for Internet Security to help organizations securely configure a wide range of IT systems, including operating systems, cloud environments,… Read More »CIS Benchmarks ★★★★★