However, without some additional context this is just another TLA (Three Letter Acronym). No matter how much money has been spent on cyber security technology, if a system has not been appropriately hardened, it is not safe. It will never be safe unless it is configured and maintained in accordance with the best practices. Key compliance frameworks, such as PCI-DSS, HIPAA, and FedRAMP, designate CIS benchmarks as established best practices. It is therefore essential to meet the CIS framework’s criteria if your business wants to comply with one or several frameworks. The CIS Controls are a prioritized list of categories.
Recent Comments