Home
Frameworks and Standards
CIS Critical Security Controls V8

CIS Critical Security Controls V8

CSC V8 control 4.2 – Establish and Maintain a Secure Configuration Process for Network Infrastructure
Overview CSC V8 control 4.2 recommends that organisations “Establish and maintain a secure configuration process for network devices. Review and...
CSC V8 control 4.3 – Configure Automatic Session Locking on Enterprise Assets
Overview CSC V8 control 4.3 recommends that organisations “Configure automatic session locking on enterprise assets after a defined period of...
CSC V8 control 4.4 – Implement and Manage a Firewall on Servers
Overview CSC V8 control 4.4 recommends that organisations “Implement and manage a firewall on servers, where supported. Example implementations include...
CSC V8 control 4.5 – Implement and Manage a Firewall on End-User Devices
Overview CSC V8 control 4.5 recommends that organisations “Implement and manage a host-based firewall or port-filtering tool on end-user devices,...
CSC V8 control 4.6 – Securely Manage Enterprise Assets and Software
Overview CSC V8 control 4.6 recommends that organisations “Securely manage enterprise assets and software. Example implementations include managing configuration through...
CSC V8 control 3.6 – Encrypt Data on End-User Devices
Overview CSC V8 control 3.6 recommends that organisations “Encrypt data on end-user devices containing sensitive data. Example implementations can include:...
CSC V8 control 4.7 – Manage Default Accounts on Enterprise Assets and Software
Overview CSC V8 control 4.7 recommends that organisations “Manage default accounts on enterprise assets and software, such as root, administrator,...
CSC V8 control 3.7 – Establish and Maintain a Data Classification Scheme
Overview CSC V8 control 3.7 recommends that organisations “Establish and maintain an overall data classification scheme for the enterprise. Enterprises...
CSC V8 control 4.8 – Uninstall or Disable Unnecessary Services on Enterprise Assets and Software
Overview CSC V8 control 4.8 recommends that organisations “Uninstall or disable unnecessary services on enterprise assets and software, such as...
CSC V8 control 3.8 – Document Data Flows
Overview CSC V8 control 3.8 recommends that organisations “Document data flows. Data flow documentation includes service provider data flows and...

Prev Next

CIS Critical Security Controls V8

CSC V8 control 4.2 – Establish and Maintain a Secure Configuration Process for Network Infrastructure

CSC V8 control 4.3 – Configure Automatic Session Locking on Enterprise Assets

CSC V8 control 4.4 – Implement and Manage a Firewall on Servers

CSC V8 control 4.5 – Implement and Manage a Firewall on End-User Devices

CSC V8 control 4.6 – Securely Manage Enterprise Assets and Software

CSC V8 control 3.6 – Encrypt Data on End-User Devices

CSC V8 control 4.7 – Manage Default Accounts on Enterprise Assets and Software

CSC V8 control 3.7 – Establish and Maintain a Data Classification Scheme

CSC V8 control 4.8 – Uninstall or Disable Unnecessary Services on Enterprise Assets and Software

CSC V8 control 3.8 – Document Data Flows