What is CIS Top 20?

The CIS Controls (formerly known as the SANS Top 20 Critical Security Controls) are a prioritized set of cybersecurity best practices that organizations can use to improve their cybersecurity posture. They are designed to help organizations focus on the most important security measures to protect against common attacks. The controls are divided into implementation groups (IGs) based on organizational size and complexity. They cover a wide range of areas, including inventory and control of hardware and software assets, vulnerability management, access control, data protection, and incident response. The CIS Controls are commonly used as a framework for developing and implementing a cybersecurity program.