CSC V7 control 3 – Continuous Vulnerability Management
Overview CSC V7 control 3 recommends that organisations “ Note CSC V7 places this control in the category of “Continuous...
- Home
- Frameworks and Standards
- CIS Critical Security Controls V7
CIS Critical Security Controls V7
CSC V7 control 4.8 – Log and Alert on Changes to Administrative Group Membership
Overview CSC V7 control 4.8 recommends that organisations “Configure systems to issue a log entry and alert when an account...CSC V7 control 6.8 – Regularly Tune SIEM
Overview CSC V7 control 6.8 recommends that organisations “On a regular basis, tune your SIEM system to better identify actionable...CSC V7 control 3.1 – Run Automated Vulnerability Scanning Tools
Overview CSC V7 control 3.1 recommends that organisations “Utilize an up-to-date SCAP-compliant vulnerability scanning tool to automatically scan all systems...CSC V7 control 4.9 – Log and Alert on Unsuccessful Administrative Account Login
Overview CSC V7 control 4.9 recommends that organisations “Configure systems to issue a log entry and alert on unsuccessful logins...CSC V7 control 7 – Email and Web Browser Protections
Overview CSC V7 control 7 recommends that organisations “ Note CSC V7 places this control in the category of “Email...CSC V7 control 3.2 – Perform Authenticated Vulnerability Scanning
Overview CSC V7 control 3.2 recommends that organisations “Perform authenticated vulnerability scanning with agents running locally on each system or...CSC V7 control 5 – Secure Configuration for Hardware and Software on Mobile Devices, Laptops, Workstations and Servers
Overview CSC V7 control 5 recommends that organisations “ Note CSC V7 places this control in the category of “Secure...CSC V7 control 7.1 – Ensure Use of Only Fully Supported Browsers and Email Clients
Overview CSC V7 control 7.1 recommends that organisations “Ensure that only fully supported web browsers and email clients are allowed...CSC V7 control 3.3 – Protect Dedicated Assessment Accounts
Overview CSC V7 control 3.3 recommends that organisations “Use a dedicated account for authenticated vulnerability scans, which should not be...