CIS Center for Internet Security

Blog Post: 20 Years of Creating Confidence in the Connected World

See all the latest

Alert Level: GUARDED

Low

Guarded

Elevated

High

Severe

Learn More

SolarWinds Cyber-Attack: What SLTTs Need to Know

Dedicated resources and a detailed, tiered set of guidance that organizations can take based on their specific capabilities and cybersecurity maturity.

Learn More

CIS harnesses the power of a global IT community to safeguard public and private organizations against cyber threats.

Join MS-ISAC

Join EI-ISAC

The MS-ISAC & EI-ISAC are focal points for cyber threat prevention, protection, response, & recovery for U.S. State, Local, Tribal, & Territorial government entities. CIS is the home of the MS-ISAC and EI-ISAC.

SolarWinds Cyber-Attack: What SLTTs Need to Know

Dedicated resources and a detailed, tiered set of guidance that organizations can take based on their specific capabilities and cybersecurity maturity.

Learn More

CIS harnesses the power of a global IT community to safeguard public and private organizations against cyber threats.

Join MS-ISAC

Join EI-ISAC

Start Secure, Stay Secure

A CIS SecureSuite Membership combines the CIS Benchmarks, CIS Controls, and CIS-CAT Pro into one powerful cybersecurity resource for businesses, nonprofits, and governmental entities.

Join Now

Consensus-developed secure configuration guidelines for hardening.

Download

Develop and update secure configuration guidelines for 25+ technology families.

Join a Community

Prescriptive, prioritized, and simplified set of cybersecurity best practices.

Download

Refine and verify best practices, related guidance, and mappings.

Join a Community

Learn More

Start Secure. Stay Secure.^®

Membership combines and automates the CIS Benchmarks, CIS Controls, and CIS-CAT Pro into a powerful and time-saving cybersecurity resource.

CIS-CAT Pro enables users to assess conformance to best practices and improve compliance scores over time.

“It is the most important membership for the compliance review of information security available in the market today.”

— Senior Manager, Information Security & Compliance International Public Service & Communications Agency

Consensus-based Guidelines

CIS Benchmarks and CIS Controls are consensus-based guides curated by security practitioners focused on performance, not profit.

Objective Standards

Our security best practices are referenced global standards verified by an objective, volunteer community of cyber experts.

Secure Online Experience

CIS is an independent, non-profit organization with a mission to provide a secure online experience for all.

Information Hub

What's New

Media mention • 27 Jan 2021

Oracle Cloud Marketplace Now Available to U.S. Government Customers

Advisory • 27 Jan 2021

Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution

Advisory • 27 Jan 2021

Multiple Vulnerabilities in Mozilla Firefox and Thunderbird Could Allow for Arbitrary Code Execution

Media mention • 26 Jan 2021

How Secure Configurations Meet Consensus

Media mention • 26 Jan 2021

Overcoming Cloud Asset Management Challenges

Press-release • 25 Jan 2021

CIS Introduces IDEA Alliance to Drive Diversity and Inclusion in the Workplace

Daily tip

When Online, Free Isn’t Always Free

There are many free services available today. You can store pictures in the cloud, develop documents, send email, and connect with people - all without spending a dime. However, free isn't always free. Many free online services will sell personal information about you to advertisers to make money.

Center for Internet Security®