What is CIS 20?

The CIS Controls (formerly known as the SANS Top 20 Critical Security Controls) are a prioritized set of actions to protect organizations and data from known attacks. CIS 20 refers to the 20 controls which are essentially best-practice cybersecurity guidelines that organizations can implement to improve their security posture. They are used to identify vulnerabilities, mitigate risks, and improve overall cybersecurity defense. The CIS Controls are used by security teams and IT professionals to prioritize and implement security measures, often serving as a benchmark for security best practices.