CIS Controls with ISMS

CIS 1, CIS 2 — Inventory and control of enterprise hardware and software assets.

CIS 7 — Continuous vulnerability management as part of the organizational risk cycle.

CIS 4, CIS 10 — Secure configuration of assets and software, and malware defenses.

CIS 5, CIS 6 — Account management and access control for systems and resources.

CIS 9, CIS 12 — Protection of email, web browsers and network infrastructure.

CIS 12 — Secure management of network infrastructure and connectivity devices.

CIS 16 — Security across the software lifecycle: design, development, testing and deployment.

CIS 11 — Data recovery: backup, validation and restoration of critical information.

CIS 14 — Cybersecurity awareness and skills training program.

CIS 15 — Security management and assessment of external service providers.

CIS 3 — Data protection: classification, retention, encryption and lifecycle management.

CIS 3 — Inventory and classification of the organization's data assets.

CIS 8, CIS 13 — Audit log management, network monitoring and threat detection.

CIS 17, CIS 18 — Incident response and penetration testing to validate defenses.

CIS 7 — Continuous vulnerability management and remediation of technical weaknesses.