CIS Control Mappings Info

1

1

Establish and Maintain Detailed Enterprise Asset Inventory

Facilitates

2

1

Address Unauthorized Assets

Facilitates

3

2

Utilize an Active Discovery Tool

Partial

4

2

Use DHCP Logging to update asset inventory

5

3

Use a Passive Asset Discovery Tool

1

1

Establish and Maintain a Software Inventory

Facilitates

2

1

Ensure Authorized Software is Currently Supported

Facilitates

3

1

Address Unauthorized Software

Facilitates

4

2

Utilize Automated Software Inventory Tools

Partial

5

2

Allowlist Authorized Software

Facilitates

6

2

Allowlist Authorized Libraries

7

3

Allowlist Authorized Scripts

1

1

Establish and Maintain a Data Management Process

2

1

Establish and Maintain a Data Inventory

Facilitates

3

1

Configure Data Access Control Lists

4

1

Enforce Data Retention

5

1

Securely Dispose of Data

6

1

Encrypt Data on End-User Devices

7

2

Establish and Maintain a Data Classification Scheme

8

2

Document Data Flows

9

2

Encrypt Data on Removable Media

10

2

Encrypt Sensitive Data In Transit

11

2

Encrypt Sensitive Data at Rest

12

2

Segment Data Processing and Storage Based on Sensitivity

13

3

Deploy a Data Loss Prevention Solution

Facilitates

14

3

Log Sensitive Data Access

1

1

Establish and Maintain a Secure Configuration Process

Facilitates

2

1

Establish and Maintain a Secure Configuration Process for Network Infrastructure

3

1

Configure Automatic Session Locking on Enterprise Assets

Facilitates

4

1

Implement and Manage a Firewall on Servers

Facilitates

5

1

Implement and Manage a Firewall on End-User Devices

Facilitates

6

1

Securely Manage Enterprise Assets and Software

7

1

Manage Default Accounts on Enterprise Assets and Software

Facilitates

8

2

Uninstall or Disable Unnecessary Services on Enterprise Assets and Software

Facilitates

9

2

Configure Trusted DNS Servers on Enterprise Assets

10

2

Enforce Automatic Device Lockout on Portable End-User Devices

Facilitates

11

2

Enforce Remote Wipe Capability on Portable End-User Devices

12

3

Separate Enterprise Workspaces on Mobile End-User Devices

1

1

Establish and Maintain an Inventory of Accounts

Facilitates

2

1

Use Unique Passwords

Facilitates

3

1

Disable Dormant Accounts

Facilitates

4

1

Restrict Administrator Privileges to Dedicated Administrator Accounts

5

2

Establish and Maintain an Inventory of Service Accounts

Facilitates

6

2

Centralize Account Management

1

1

Establish an Access Granting Process

2

1

Establish an Access Revoking Process

3

1

Require MFA for Externally-Exposed Applications

4

1

Require MFA for Remote Network Access

5

1

Require MFA for Administrative Access

6

2

Establish and Maintain an Inventory of Authentication and Authorization Systems

7

2

Centralize Access Control

8

3

Define and Maintain Role-Based Access Control

1

1

Establish and Maintain a Vulnerability Management Process

Facilitates

2

1

Establish and Maintain a Remediation Process

Facilitates

3

1

Perform Automated Operating System Patch Management

Partial

4

1

Perform Automated Application Patch Management

Partial

5

2

Perform Automated Vulnerability Scans of Internal Enterprise Assets

Fully

6

2

Perform Automated Vulnerability Scans of Externally-Exposed Enterprise Assets

Fully

7

2

Remediate Detected Vulnerabilities

Partial

1

1

Establish and Maintain an Audit Log Management Process

2

1

Collect Audit Logs

3

1

Ensure Adequate Audit Log Storage

4

2

Standardize Time Synchronization

Facilitates

5

2

Collect Detailed Audit Logs

6

2

Collect DNS Query Audit Logs

7

2

Collect URL Request Audit Logs

8

2

Collect Command-Line Audit Logs

9

2

Centralize Audit Logs

10

2

Retain Audit Logs

11

2

Conduct Audit Log Reviews

12

3

Collect Service Provider Logs

1

1

Ensure Use of Only Fully Supported Browsers and Email Clients

Facilitates

2

1

Use DNS Filtering Services

3

2

Maintain and Enforce Network-Based URL Filters

4

2

Restrict Unnecessary or Unauthorized Browser and Email Client Extensions

5

2

Implement DMARC

6

2

Block Unnecessary File Types

7

3

Deploy and Maintain Email Server Anti-Malware Protections

1

1

Deploy and Maintain Anti-Malware Software

2

1

Configure Automatic Anti-Malware Signature Updates

3

1

Disable Autorun and Autoplay for Removable Media

4

2

Configure Automatic Anti-Malware Scanning of Removable Media

5

2

Enable Anti-Exploitation Features

6

2

Centrally Manage Anti-Malware Software

7

3

Use Behavior-Based Anti-Malware Software

1

1

Establish and Maintain a Data Recovery Process

2

1

Perform Automated Backups

3

1

Protect Recovery Data

4

1

Establish and Maintain an Isolated Instance of Recovery Data

5

2

Test Data Recovery

1

1

Ensure Network Infrastructure is Up-to-Date

Facilitates

2

2

Establish and Maintain a Secure Network Architecture

3

2

Securely Manage Network Infrastructure

4

2

Establish and Maintain Architecture Diagram(s)

5

2

Centralize Network Authentication, Authorization, and Auditing (AAA)

6

2

Use of Secure Network Management and Communication Protocols

7

2

Ensure Remote Devices Utilize a VPN and are Connecting to an Enterprise’s AAA Infrastructure

8

3

Establish and Maintain Dedicated Computing Resources for All Administrative Work

1

2

Centralize Security Event Alerting

2

2

Deploy a Host-Based Intrusion Detection Solution

3

2

Deploy a Network Intrusion Detection Solution

4

2

Perform Traffic Filtering Between Network Segments

5

2

Manage Access Control for Remote Assets

6

2

Collect Network Traffic Flow Logs

7

3

Deploy a Host-Based Intrusion Prevention Solution

8

3

Deploy a Network Intrusion Prevention Solution

9

3

Deploy Port-Level Access Control

10

3

Perform Application Layer Filtering

11

3

Tune Security Event Alerting Thresholds

1

1

Establish and Maintain a Security Awareness Program

2

1

Train Workforce Members to Recognize Social Engineering Attacks

3

1

Train Workforce Members on Authentication Best Practices

4

1

Train Workforce on Data Handling Best Practices

5

1

Train Workforce Members on Causes of Unintentional Data Exposure

6

1

Train Workforce Members on Recognizing and Reporting Security Incidents

7

1

Train Workforce on How to Identify and Report if Their Enterprise Assets are Missing Security Updates

8

1

Train Workforce on the Dangers of Connecting to and Transmitting Enterprise Data Over Insecure Networks

9

2

Conduct Role-Specific Security Awareness and Skills Training

1

1

Establish and Maintain an Inventory of Service Providers

2

2

Establish and Maintain a Service Provider Management Policy

3

2

Classify Service Providers

4

2

Ensure Service Provider Contracts Include Security Requirements

5

3

Assess Service Providers

6

3

Monitor Service Providers

7

3

Securely Decommission Service Providers

1

2

Establish and Maintain a Secure Application Development Process

2

2

Establish and Maintain a Process to Accept and Address Software Vulnerabilities

3

2

Perform Root Cause Analysis on Security Vulnerabilities

4

2

Establish and Manage an Inventory of Third-Party Software Components

5

2

Use Up-to-Date and Trusted Third-Party Software Components

6

2

Establish and Maintain a Severity Rating System and Process for Application Vulnerabilities

7

2

Use Standard Hardening Configuration Templates for Application Infrastructure

8

2

Separate Production and Non-Production Systems

9

2

Train Developers in Application Security Concepts and Secure Coding

10

2

Apply Secure Design Principles in Application Architectures

11

2

Leverage Vetted Modules or Services for Application Security Components

12

3

Implement Code-Level Security Checks

13

3

Conduct Application Penetration Testing

14

3

Conduct Threat Modeling

1

1

Designate Personnel to Manage Incident Handling

2

1

Establish and Maintain Contact Information for Reporting Security Incidents

3

1

Establish and Maintain an Enterprise Process for Reporting Incidents

4

2

Establish and Maintain an Incident Response Process

5

2

Assign Key Roles and Responsibilities

6

2

Define Mechanisms for Communicating During Incident Response

7

2

Conduct Routine Incident Response Exercises

8

2

Conduct Post-Incident Reviews

9

3

Establish and Maintain Security Incident Thresholds

1

2

Establish and Maintain a Penetration Testing Program

2

2

Perform Periodic External Penetration Tests

3

2

Remediate Penetration Test Findings

4

3

Validate Security Measures

5

3

Perform Periodic Internal Penetration Tests