CIS Critical Security Controls

Organizations seeking to strengthen information security often adopt accepted policies, processes and procedures known to mitigate cyber attacks. These organizations frequently turn to the Center for Internet Security (CIS) Critical Security Controls (previously known as the SANS Top 20) for guidance. According to the CIS, which assumed responsibility for the controls in 2015, the “Critical Security Controls (CSCs) are 20 prioritized, well-vetted and supported security actions that organizations can take to assess and improve their current security state.”