Control frameworkInternational

CIS Critical Security Controls (CIS Controls)

A prioritised, practical set of safeguards to defend against common attacks.

Classification

Control framework

Issuing authority

Center for Internet Security (CIS)

Jurisdiction

International · Sector: All

Status / edition

CIS Controls v8.1

Key dates

v8.1 released 2024 (v8 released 2021)

Mandatory or voluntary

Voluntary

Who it applies to

Any organisation seeking a prioritised set of defensive actions (Implementation Groups 1-3).

Purpose

A prioritised, practical set of safeguards to defend against common attacks.

Major requirements / obligations

  • Adopt safeguards by Implementation Group
  • Prioritise foundational controls
  • Measure coverage

Control domains

Asset managementAccess controlLogging and monitoringIncident response

Last reviewed

2026-10-18 (source verification date)

This library provides general information for orientation only. It is not legal advice, a determination of applicability, or a substitute for formal certification or professional counsel. Verify current legal status, editions and dates against the official source before relying on any entry. Inclusion of a jurisdiction or instrument here is informational and does not imply that Srida IT provides regulated services, holds local authorisation, or has a presence in that jurisdiction.