CIS Controls and Kudo
How Kudo, through its ISMS, relates to CIS Controls: domain mapping, controls and compliance objectives explained step by step.
The CIS Controls v8 are a prioritized set of cyber defense actions developed by the Center for Internet Security. They group best practices into 18 controls with 153 safeguards distributed across 3 implementation groups according to the organization's maturity. Kudo maps its controls to the framework and the ISMS policies.
CIS Controls v8 Structure
18 Controls
From asset inventory to penetration testing, organized by implementation priority.
153 Safeguards
Specific actions distributed across the 18 controls of the CIS framework.
3 Implementation Groups
IG1 (56), IG2 (130) and IG3 (153) — tiered according to the organization's maturity and resources.
CIS v8 Controls
| Control | Name | Safeguards |
|---|---|---|
| CIS 1 | Inventory and Control of Enterprise Assets | 5 |
| CIS 2 | Inventory and Control of Software Assets | 7 |
| CIS 3 | Data Protection | 14 |
| CIS 4 | Secure Configuration of Enterprise Assets and Software | 12 |
| CIS 5 | Account Management | 6 |
| CIS 6 | Access Control Management | 8 |
| CIS 7 | Continuous Vulnerability Management | 7 |
| CIS 8 | Audit Log Management | 12 |
| CIS 9 | Email and Web Browser Protections | 7 |
| CIS 10 | Malware Defenses | 7 |
| CIS 11 | Data Recovery | 7 |
| CIS 12 | Network Infrastructure Management | 8 |
| CIS 13 | Network Monitoring and Defense | 11 |
| CIS 14 | Security Awareness and Skills Training | 9 |
| CIS 15 | Service Provider Management | 7 |
| CIS 16 | Application Software Security | 14 |
| CIS 17 | Incident Response Management | 9 |
| CIS 18 | Penetration Testing | 5 |
| Total | 153 |