Podcast CategoriesCIS Controls

CIS Controls

CIS Controls consists of 18 main control areas, which together cover the management of assets, data, configurations, access, monitoring, training, incident response, and testing of security measures.

18 episodes

Episodes

CIS Control 1 - Inventory and Control of Enterprise Assets
March 18, 2026 |6 min.
CIS Control 1 - Inventory and Control of Enterprise Assets
In this section, we will review CIS Control 1: Inventory and Control of Enterprise Assets.
PDF
CIS Control 2 - Inventory and Control of Software Assets
March 18, 2026 |6 min.
CIS Control 2 - Inventory and Control of Software Assets
In this section, we will review CIS Control 2: Inventory and Control of Software Assets.
PDF
CIS Control 3 - Data Protection
March 18, 2026 |7 min.
CIS Control 3 - Data Protection
In this section, we will review CIS Control 3: Establish and Maintain a Data Management Process.
PDF
CIS Control 4 - Secure Configuration of Enterprise Assets and Software
March 18, 2026 |8 min.
CIS Control 4 - Secure Configuration of Enterprise Assets and Software
In this section, we will review CIS Control 4: Secure Configuration of Enterprise Assets and Software.
PDF
CIS Control 5 - Account Management
March 18, 2026 |7 min.
CIS Control 5 - Account Management
In this section, we will review CIS Controls 5 and 6: Account Management and Access Control Management.
PDF
CIS Control 6 - Access Control Management
March 18, 2026 |7 min.
CIS Control 6 - Access Control Management
In this section, we will review CIS Controls 5 and 6: Account Management and Access Control Management.
PDF
CIS Control 7 - Continuous Vulnerability Management
March 18, 2026 |6 min.
CIS Control 7 - Continuous Vulnerability Management
In this section, we will review CIS Control 7: Continuous Vulnerability Management.
PDF
CIS Control 8 - Audit Log Management
March 18, 2026 |5 min.
CIS Control 8 - Audit Log Management
In this section, we will review CIS Control 8: Audit Log Management.
PDF
CIS Control 9 - Email and Web Browser Protections
March 18, 2026 |4 min.
CIS Control 9 - Email and Web Browser Protections
In this section, we will review CIS Control 9: Email and Web Browser Protections.
PDF
CIS Control 10 - Malware Defense
March 18, 2026 |6 min.
CIS Control 10 - Malware Defense
In this section, we will review CIS Control 10: Malware Defense.
PDF
CIS Control 11 - Data Recovery
March 18, 2026 |6 min.
CIS Control 11 - Data Recovery
In this section, we will review CIS Control 11: Data Recovery.
PDF
CIS Control 12 - Network Infrastructure Management
March 18, 2026 |5 min.
CIS Control 12 - Network Infrastructure Management
In this section, we will review CIS Control 12: Network Infrastructure Management.
PDF
CIS Control 13 - Network Monitoring and Defense
March 18, 2026 |6 min.
CIS Control 13 - Network Monitoring and Defense
In this section, we will review CIS Control 13: Network Monitoring and Defense.
PDF
CIS Control 14 - Security Awareness and Skills Training
March 18, 2026 |6 min.
CIS Control 14 - Security Awareness and Skills Training
In this section, we will review CIS Control 14: Security Awareness and Skills Training.
PDF
CIS Control 15 - Service Provider Management
March 18, 2026 |7 min.
CIS Control 15 - Service Provider Management
In this section, we will review CIS Control 15: Service Provider Management.
PDF
CIS Control 16 - Application Software Security
March 18, 2026 |6 min.
CIS Control 16 - Application Software Security
In this section, we will review CIS Control 16: Application Software Security.
PDF
CIS Control 17 - Incident Response Management
March 18, 2026 |6 min.
CIS Control 17 - Incident Response Management
In this section, we will review CIS Control 17: Incident Response Management.
PDF
CIS Control 18 - Penetration Testing
March 18, 2026 |5 min.
CIS Control 18 - Penetration Testing
In this section, we will review CIS Control 18: Penetration Testing.
PDF

Achieve CIS18 Compliance with Our Awareness Training

Control 14 in CIS18 recommends both awareness training and a corresponding policy, ensuring employees become an active part of the company's defense. With SecureFirst, you receive training that translates this recommendation into practice – concise, targeted, and accompanied by a relevant policy.