CybersecurityControl setIn 6clicks App

CIS Controls v8.1 — CIS Critical Security Controls Version 8.1

The CIS Critical Security Controls Version 8.1 is a prioritized set of cybersecurity best practices designed to defend against common cyber threats to systems and networks. It includes updates to align with evolving industry standards and frameworks, such as NIST CSF 2.0.

Talk to a GRC Expert View source ↗

CIS Controls v8.1 is an iterative update to Version 8, focusing on context, coexistence with other frameworks, and consistency for existing users. Key changes include updated mappings to the NIST CSF 2.0 security functions, revised glossary definitions, changes to asset classes, and improved safeguard descriptions. It emphasizes security in hybrid and cloud environments and includes resources like PDFs, Excel files, and a change log to aid implementation. This version aims to align with both industry and policy frameworks while preserving the unique focus of the CIS Controls.

#cybersecurity#controls#frameworks#best practices#implementation#cloud security#safeguards

Related in Cybersecurity

CybersecurityGuidelineIn 6clicks App

CISA ZTMM V2 — CISA Zero Trust Maturity Model V2

The CISA Zero Trust Maturity Model V2 provides a structured roadmap for organizations implementing a zero trust architecture. It outlines five key pillars and associated maturity levels to guide strategies and execution.

Issuer: US Department of Homeland Security (DHS)
Jurisdiction: United States
Version: 2
Updated: Apr 2023

View detailszero trust · cybersecurity

CybersecurityGuidelineIn 6clicks App

Guidelines on ICT and Security Risk Management

The EBA Guidelines establish requirements for credit institutions, investment firms, and payment service providers on mitigating and managing information and communication technology (ICT) risks. They aim to ensure a consistent and robust approach to ICT and security risk management across the EU financial sector.

Issuer: European Banking Authority (EBA)
Jurisdiction: European Union
Version: 2025 update
Updated: Jul 2025

View detailsict risk · security management

CybersecurityFrameworkIn 6clicks App

C2M2 — Cybersecurity Capability Maturity Model

The Cybersecurity Capability Maturity Model (C2M2) is a tool developed by the U.S. Department of Energy to help organizations evaluate and enhance their cybersecurity capabilities. It focuses on both IT and OT environments, offering a structured framework of over 350 practices organized into 10 domains.

Issuer: U.S. Department of Energy
Jurisdiction: United States
Version: 2.1
Updated: Jun 2022

View detailscybersecurity · maturity model