Framework
Full specification

CIS 18

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

The CIS18 critical security controls is a comprehensive set of instructions and measures released by The Center for Internet Security. Controls are designed to fix and prevent common vulnerabilities and to offer organizations a structured way to strengthen their security.

The CIS18 critical security controls cover the different fields of cyber security, including vulnerability management, secure configuration, access control, incident management and more. It is a comprehensive set of instructions and measures released by The Center for Internet Security. The controls are designed to fix and prevent common vulnerabilities and to offer organizations a structured way to strengthen their security.

The CIS18 controls were formerly known as the SANS Critical Security Controls (SANS Top 20), and the current version 8.1 is updated to align with the evolving industry standards and cyber security threats. The controls are a prescriptive, prioritized, and simplified set of best practices that any organization can use to strengthen their security measures.

Tasks
171
Scope
Global
Here's what
CIS 18
requires and how to comply.

Below you'll find all of the requirements of this framework. In Cyberday, we map all requirement to global tasks, making multi-compliance management easy. Do it once, and see the progress across all frameworks!

Requirements
16.11: Leverage Vetted Modules or Services for Application Security Components
16.12: Implement Code-Level Security Checks
16.13: Conduct Application Penetration Testing
16.14: Conduct Threat Modeling
17.1: Designate Personnel to Manage Incident Handling
17.2: Establish and Maintain Contact Information for Reporting Security Incidents
17.3: Establish and Maintain an Enterprise Process for Reporting Incidents
17.4: Establish and Maintain an Incident Response Process
17.5: Assign Key Roles and Responsibilities
17.6: Define Mechanisms for Communicating During Incident Response
17.7: Conduct Routine Incident Response Exercises
17.8: Conduct Post-Incident Reviews
17.9: Establish and Maintain Security Incident Thresholds
18.1: Establish and Maintain a Penetration Testing Program
18.2: Perform Periodic External Penetration Tests
18.3: Remediate Penetration Test Findings
CIS 18
learning hub

Explore our comprehensive resources and improve your security with the themes of this framework.

How Cyberday helps with
CIS 18

Discover specific ways our platform streamlines your ISO 27001 compliance process, from automated controls to audit preparation.

Explore use case
Free
CIS 18
assessment

Take our comprehensive assessment to identify gaps in your current implementation and get personalized recommendations.

Start assessment
Read more about
CIS 18

Dive deeper with our articles, case studies, and expert insights on framework implementation.

Read article
Guide to compliance

Get a concise overview of all requirements, controls, and implementation steps in our quick guide.

Get the guide
Framework comparison

See how the overlap and differences with any other framework to optimize your compliance strategy.

Compare framework
Join a live
CIS 18
webinar

Participate in expert-led sessions covering implementation strategies, common pitfalls, and best practices for compliance.

Register for webinar
Join our live webinars

Participate in expert-led sessions covering implementation strategies, common pitfalls, and best practices for compliance.

Register for webinar
What are frameworks?

Understand the basics of cyber security frameworks with our comprehensive guide.

Read the article

The ISMS component hierachy

When building an ISMS, it's important to understand the different levels of information hierarchy. Here's how Cyberday is structured.

Framework

Sets the overall compliance standard or regulation your organization needs to follow.

Requirements

Break down the framework into specific obligations that must be met.

Tasks

Concrete actions and activities your team carries out to satisfy each requirement.

Policies

Documented rules and practices that are created and maintained as a result of completing tasks.

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.