The NIST Cybersecurity Framework (CSF) 2.0 organizes cybersecurity activities into six high-level functions that guide organizations in managing and reducing cyber risk. Govern provides strategic oversight, policies, and accountability structures to integrate cybersecurity into organizational decision-making. Identify focuses on understanding assets, business environment, and risk landscape to prioritize protective efforts. Protect involves implementing safeguards such as access controls, encryption, and secure configurations to prevent or limit the impact of cyber events. Detect emphasizes timely discovery of anomalies and potential incidents through monitoring and threat intelligence. Respond outlines processes for containing, mitigating, and communicating during incidents to minimize damage. Finally, Recover addresses restoring capabilities and services after an event to maintain business continuity. Together, these six functions provide a comprehensive, flexible, and risk-based approach to cybersecurity management.
This document is a comprehensive guide developed by the Center for Internet Security (CIS) in collaboration with SAFECode and a community of experts. It provides a practical, evaluable framework to… Read More »CIS Secure by Design: A Guide to Assessing Software Security Practices ★★★★★
The CIS Controls Internet of Things (IoT) Companion Guide provides detailed guidance on how to apply the cybersecurity best practices of the CIS Controls, particularly Version 8.1, to IoT environments.… Read More »CIS Controls Internet of Things Companion Guide ★★★★★
CIS Controls v8.1 introduced significant updates to align with NIST Cybersecurity Framework (CSF) 2.0, including the addition of a dedicated “Governance” security function to address organizational oversight and compliance requirements.… Read More »CIS Controls v8.1 Mapping to NIST CSF 2.0
CIS Critical Security Controls v8 (CIS CSC v8) is a comprehensive cybersecurity framework developed by the Center for Internet Security to help organizations defend against modern cyber threats. Version 8… Read More »CIS Critical Security Controls Version 8 ★★★★★
The CIS Software Supply Chain Security Guide, developed in collaboration with Aqua Security, offers over 100 foundational security recommendations aimed at safeguarding the software supply chain across various technologies and… Read More »CIS Software Supply Chain Security Guide
The CIS Controls Cloud Companion Guide v8 provides detailed guidance on applying the security best practices from CIS Controls version 8 to cloud environments from the consumer or customer perspective.… Read More »CIS Controls Cloud Companion Guide v8
CIS Benchmarks are comprehensive, consensus-driven security guidelines developed by the Center for Internet Security to help organizations securely configure a wide range of IT systems, including operating systems, cloud environments,… Read More »CIS Benchmarks ★★★★★