Protect
CIS controls in the Protect family.
39 articles
- CIS 3.3 — Configure Data Access Control Lists
- CIS 3.4 — Enforce Data Retention
- CIS 3.5 — Securely Dispose of Data
- CIS 3.6 — Encrypt Data on End-User Devices
- CIS 4.1 — Establish and Maintain a Secure Configuration Process
- CIS 4.2 — Establish and Maintain a Secure Configuration Process for Network Infrastructure
- CIS 4.3 — Configure Automatic Session Locking on Enterprise Assets
- CIS 4.4 — Implement and Manage a Firewall on Servers
- CIS 4.5 — Implement and Manage a Firewall on End-User Devices
- CIS 4.6 — Securely Manage Enterprise Assets and Software
- CIS 4.7 — Manage Default Accounts on Enterprise Assets and Software
- CIS 5.2 — Use Unique Passwords
- CIS 5.4 — Restrict Administrator Privileges to Dedicated Administrator Accounts
- CIS 6.1 — Establish an Access Granting Process
- CIS 6.2 — Establish an Access Revoking Process
- CIS 6.3 — Require MFA for Externally-Exposed Applications
- CIS 6.4 — Require MFA for Remote Network Access
- CIS 6.5 — Require MFA for Administrative Access
- CIS 7.1 — Establish and Maintain a Vulnerability Management Process
- CIS 7.3 — Perform Automated Operating System Patch Management
- CIS 7.4 — Perform Automated Application Patch Management
- CIS 8.1 — Establish and Maintain an Audit Log Management Process
- CIS 8.3 — Ensure Adequate Audit Log Storage
- CIS 9.1 — Ensure Use of Only Fully Supported Browsers and Email Clients
- CIS 9.2 — Use DNS Filtering Services
- CIS 10.1 — Deploy and Maintain Anti-Malware Software
- CIS 10.2 — Configure Automatic Anti-Malware Signature Updates
- CIS 10.3 — Disable Autorun and Autoplay for Removable Media
- CIS 11.3 — Protect Recovery Data
- CIS 12.1 — Ensure Network Infrastructure is Up-to-Date
- CIS 14.1 — Establish and Maintain a Security Awareness Program
- CIS 14.2 — Train Workforce Members to Recognize Social Engineering Attacks
- CIS 14.3 — Train Workforce Members on Authentication Best Practices
- CIS 14.4 — Train Workforce on Data Handling Best Practices
- CIS 14.5 — Train Workforce Members on Causes of Unintentional Data Exposure
- CIS 14.6 — Train Workforce Members on Recognizing and Reporting Security Incidents
- CIS 14.7 — Train Workforce on How to Identify and Report if Their Enterprise Assets are Missing Security Updates
- CIS 14.8 — Train Workforce on the Dangers of Connecting to and Transmitting Enterprise Data Over Insecure Networks
- CIS 2.5 — Allowlist Authorized Software