What is CIS Controls?

The CIS Controls (formerly known as the SANS Top 20 Critical Security Controls) are a prioritized set of actions that organizations can take to protect themselves from the most pervasive and dangerous cyber attacks. They provide a concise focus for prioritizing security investments and improving an organization's overall cyber defense posture. They are commonly used as a framework for implementing and managing cybersecurity, for auditing, and for compliance purposes.