CIS Logo
tagline: Confidence in the Connected World
Pencil Blog Post: Future of Cloud Security: Thoughts from AWS Public Sector Summit Arrow See all the latest Arrow

Robust automated configuration assessment tool rapidly identifies vulnerabilities with coverage for 80+ CIS Benchmarks.

Learn More Arrow

Proven CIS Benchmarks guidelines to protect over 100 distinct systems & platforms.

Download Arrow

20 prioritized actions to beat the vast majority of the most common attacks.

Download Arrow

Start Secure, Stay Secure A CIS SecureSuite Membership combines and automates the CIS Benchmarks, CIS Controls, and CIS-CAT Pro into one powerful, time-saving cybersecurity resource for businesses, nonprofits, and governmental entities.

  • Leverage remediation content for rapid CIS Benchmark implementation
  • Connect with CIS staff and developers for technical support
“It is the most important membership for the compliance review of information security available in the market today.”
— Senior Manager, Information Security & Compliance International Public Service & Communications Agency

Consensus-based Guidelines

CIS Benchmarks and CIS Controls are consensus-based guides curated by security practitioners focused on performance, not profit.

Objective Standards

Our security best practices are referenced global standards verified by an objective, volunteer community of cyber experts.

Secure Online Experience

CIS is an independent, non-profit organization with a mission to provide a secure online experience for all.

Information Hub
What's New
CONTROL: 1 --- ADVISORY CONTROL: 0
Blog post • 14 Jun 2019
CONTROL: 2 --- ADVISORY CONTROL: 0
Advisory • 14 Jun 2019
CONTROL: 3 --- ADVISORY CONTROL: 1
Blog post • 13 Jun 2019
CONTROL: 4 --- ADVISORY CONTROL: 1
Blog post • 11 Jun 2019
CONTROL: 5 --- ADVISORY CONTROL: 1
Advisory • 11 Jun 2019
CONTROL: 6 --- ADVISORY CONTROL: 2
CONTROL: 6 --- ADVISORY CONTROL: 3
CONTROL: 6 --- ADVISORY CONTROL: 4
White paper • 10 Jun 2019
CONTROL: 6 --- ADVISORY CONTROL: 4
Daily tip

Know the Rules of Cyber Ethics

"Cyber ethics" refers to the code of responsible behavior on the Internet. Just as we are taught to act responsibly in everyday life with lessons such as "Don't take what doesn't belong to you" and "Do not harm others," we must act responsibly in the cyber world as well. The basic rule is "Do not do something in cyberspace that you would consider wrong or illegal in everyday life." Click for more considerations.