Content library
CIS 18

Requirements included in the framework

Policy
Linked frameworks
Framework
Tasks
Establish an Access Revoking Process
6.2
CIS 18 controls
1
Require MFA for Externally-Exposed Applications
6.3
CIS 18 controls
4
Require MFA for Remote Network Access
6.4
CIS 18 controls
3
Require MFA for Administrative Access
6.5
CIS 18 controls
2
Establish and Maintain an Inventory of Authentication and Authorization Systems
6.6
CIS 18 controls
2
Centralize Access Control
6.7
CIS 18 controls
1
Define and Maintain Role-Based Access Control
6.8
CIS 18 controls
5
Establish and Maintain a Vulnerability Management Process
7.1
CIS 18 controls
5
Establish and Maintain a Remediation Process
7.2
CIS 18 controls
1
Perform Automated Operating System Patch Management
7.3
CIS 18 controls
2
Perform Automated Application Patch Management
7.4
CIS 18 controls
1
Perform Automated Vulnerability Scans of Internal Enterprise Assets
7.5
CIS 18 controls
1
Perform Automated Vulnerability Scans of Externally-Exposed Enterprise Assets
7.6
CIS 18 controls
1
Remediate Detected Vulnerabilities
7.7
CIS 18 controls
2
Establish and Maintain an Audit Log Management Process
8.1
CIS 18 controls
4
Retain Audit Logs
8.10
CIS 18 controls
1
Conduct Audit Log Reviews
8.11
CIS 18 controls
1
Collect Service Provider Logs
8.12
CIS 18 controls
1
Collect Audit Logs
8.2
CIS 18 controls
3
Ensure Adequate Audit Log Storage
8.3
CIS 18 controls
1
Standardize Time Synchronization
8.4
CIS 18 controls
1
Collect Detailed Audit Logs
8.5
CIS 18 controls
1
Collect DNS Query Audit Logs
8.6
CIS 18 controls
1
Collect URL Request Audit Logs
8.7
CIS 18 controls
1

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.
Get to know Cyberday
Start your free trial
Cyberday is your all-in-one solution for building a secure and compliant organization. Whether you're setting up a cyber security plan, evaluating policies, implementing tasks, or generating automated reports, Cyberday simplifies the entire process.
With AI-driven insights and a user-friendly interface, it's easier than ever to stay ahead of compliance requirements and focus on continuous improvement.
Clear framework compliance plans
Activate relevant frameworks and turn them into actionable policies tailored to your needs.
Credible reports to proof your compliance
Use guided tasks to ensure secure implementations and create professional reports with just a few clicks.
AI-powered improvement suggestions
Focus on the most impactful improvements in your compliance with help from Cyberday AI.