Security Controls
CIS Controls
CIS Critical Security Controls
Community
Global
Center for Internet Security
Since 2008
Eighteen prioritised controls with 153 safeguards, split into three implementation groups so a small organisation can implement the first group and honestly claim a baseline.
Paired with the CIS Benchmarks, the hardening configurations for operating systems, cloud services and databases that most CIS-aligned tooling actually checks against.
At a glance
- Category
- Security Controls
- Jurisdiction
- Global
- Governance
- Center for Internet Security
- Status
- v8.1 (June 2024): 18 controls, 153 safeguards, three implementation groups
- First released
- 2008
Links
Related frameworks
Other entries under Security Controls.
- ISO/IEC 27002: Information Security Controls
- NIST SP 800-53: Security and Privacy Controls for Information Systems
See CIS Controls in context
Open the interactive Data Landscape for Regulation to compare CIS Controls against every other framework, or grab the raw JSON. Certification schemes and editions move — follow the source links before relying on this page.