The CIS Controls Cloud Companion Guide v8 provides detailed guidance on applying the security best practices from CIS Controls version 8 to cloud environments from the consumer or customer perspective. It discusses how each top-level CIS Control should be interpreted and implemented in cloud contexts, highlighting unique considerations and differences from traditional IT environments. The guide helps organizations tailor CIS Controls to their specific cloud IT or Operational Technology (OT) environments, serving as a foundational resource for security assessments and improvement roadmaps. It also addresses securing cloud-based agile software development processes, including DevSecOps practices, to integrate security throughout the software lifecycle. Overall, the guide supports enterprises in effectively managing cloud security risks and aligning CIS Controls with cloud-specific challenges.
Publication's URL
https://www.cisecurity.org/insights/white-papers/cis-controls-v8-cloud-companion-guideAdditional documents on this topic
- CIS Controls Internet of Things Companion Guide ★★★★★
- CISA Principles for the Secure Integration of Artificial Intelligence in Operational Technology
- NIST SP 800-88 Rev. 2 Guidelines for Media Sanitization
- NIST IR 8349 Methodology for Characterizing Network Behavior of Internet of Things Devices
- NIST ZTA Component mapping to NIST CSF and Controls