Content library
CIS 18

Requirements included in the framework

Policy
Linked frameworks
Framework
Tasks
Conduct Routine Incident Response Exercises
17.7
CIS 18 controls
2
Conduct Post-Incident Reviews
17.8
CIS 18 controls
2
Establish and Maintain Security Incident Thresholds
17.9
CIS 18 controls
3
Establish and Maintain a Penetration Testing Program
18.1
CIS 18 controls
1
Perform Periodic External Penetration Tests
18.2
CIS 18 controls
2
Remediate Penetration Test Findings
18.3
CIS 18 controls
2
Validate Security Measures
18.4
CIS 18 controls
3
Perform Periodic Internal Penetration Tests
18.5
CIS 18 controls
1
Establish and Maintain a Software Inventory
2.1
CIS 18 controls
4
Ensure Authorized Software is Currently Supported
2.2
CIS 18 controls
4
Address Unauthorized Software
2.3
CIS 18 controls
2
Utilize Automated Software Inventory Tools
2.4
CIS 18 controls
2
Allowlist Authorized Software
2.5
CIS 18 controls
2
Allowlist Authorized Libraries
2.6
CIS 18 controls
3
Allowlist Authorized Scripts
2.7
CIS 18 controls
1
Establish and Maintain a Data Management Process
3.1
CIS 18 controls
11
Encrypt Sensitive Data in Transit
3.10
CIS 18 controls
2
Encrypt Sensitive Data at Rest
3.11
CIS 18 controls
4
Segment Data Processing and Storage Based on Sensitivity
3.12
CIS 18 controls
1
Deploy a Data Loss Prevention Solution
3.13
CIS 18 controls
2
Log Sensitive Data Access
3.14
CIS 18 controls
5
Establish and Maintain a Data Inventory
3.2
CIS 18 controls
4
Configure Data Access Control Lists
3.3
CIS 18 controls
3
Enforce Data Retention
3.4
CIS 18 controls
3

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.
Get to know Cyberday
Start your free trial
Cyberday is your all-in-one solution for building a secure and compliant organization. Whether you're setting up a cyber security plan, evaluating policies, implementing tasks, or generating automated reports, Cyberday simplifies the entire process.
With AI-driven insights and a user-friendly interface, it's easier than ever to stay ahead of compliance requirements and focus on continuous improvement.
Clear framework compliance plans
Activate relevant frameworks and turn them into actionable policies tailored to your needs.
Credible reports to proof your compliance
Use guided tasks to ensure secure implementations and create professional reports with just a few clicks.
AI-powered improvement suggestions
Focus on the most impactful improvements in your compliance with help from Cyberday AI.