What is the Center for Internet Security (CIS) Critical Security Controls?

CIS is a nonprofit organization that develops Configuration Policy Benchmarks that allow businesses to improve security and compliance programs and postures.

Its CIS Controls™ and CIS Benchmarks™ are the worldwide standard and accepted best practices for securing IT systems and data against the most pervasive attacks. These demonstrated guidelines are continuously refined and verified by a global community of volunteers who are experienced IT professionals.

CIS also acts as home to the Multi-State Information Sharing and Analysis Center® (MS-ISAC®), the go-to resource for cyber threat prevention, protection, response, and recovery for U.S. State, Local, Tribal, and Territorial government entities, and the Elections Infrastructure Information Sharing and Analysis Center™ (EI-ISAC™), which supports the cybersecurity needs of U.S. State, Local and Territorial elections offices.