CIS Critical Security Controls V8

Overview CSC V8 control 7.6 recommends that organisations “Perform automated vulnerability scans of externally-exposed enterprise assets using a SCAP-compliant vulnerability...

Overview CSC V8 control 7.7 recommends that organisations “Remediate detected vulnerabilities in software through processes and tooling on a monthly,...

Overview CSC V8 control 8 recommends that organisations “Collect, alert, review, and retain audit logs of events that could help...

Overview CSC V8 control 8.1 recommends that organisations “Establish and maintain an audit log management process that defines the enterprise’s...

Overview CSC V8 control 8.2 recommends that organisations “Collect audit logs. Ensure that logging, per the enterprise’s audit log management...

Overview CSC V8 control 8.3 recommends that organisations “Ensure that logging destinations maintain adequate storage to comply with the enterprise’s...

Overview CSC V8 control 8.4 recommends that organisations “Standardize time synchronization. Configure at least two synchronized time sources across enterprise...

Overview CSC V8 control 8.5 recommends that organisations “Configure detailed audit logging for enterprise assets containing sensitive data. Include event...

Overview CSC V8 control 8.6 recommends that organisations “Collect DNS query audit logs on enterprise assets, where appropriate and supported.”....

Overview CSC V8 control 8.7 recommends that organisations “Collect URL request audit logs on enterprise assets, where appropriate and supported.”....