CIS Logo
tagline: Confidence in the Connected World
Pencil Blog Post: September 2020 Top 10 Malware Arrow See all the latest Arrow

Consensus-developed secure configuration guidelines for hardening.

Develop and update secure configuration guidelines for 25+ technology families.

Prescriptive, prioritized, and simplified set of cybersecurity best practices.

Refine and verify best practices, related guidance, and mappings.

Start Secure. Stay Secure.®

Membership combines and automates the CIS Benchmarks, CIS Controls, and CIS-CAT Pro into a powerful and time-saving cybersecurity resource.


CIS-CAT Pro enables users to assess conformance to best practices and improve compliance scores over time.

“It is the most important membership for the compliance review of information security available in the market today.”
— Senior Manager, Information Security & Compliance International Public Service & Communications Agency

Consensus-based Guidelines

CIS Benchmarks and CIS Controls are consensus-based guides curated by security practitioners focused on performance, not profit.

Objective Standards

Our security best practices are referenced global standards verified by an objective, volunteer community of cyber experts.

Secure Online Experience

CIS is an independent, non-profit organization with a mission to provide a secure online experience for all.

Information Hub

What's New
CONTROL: 1 --- ADVISORY CONTROL: 0
CONTROL: 2 --- ADVISORY CONTROL: 0
CONTROL: 3 --- ADVISORY CONTROL: 0
CONTROL: 4 --- ADVISORY CONTROL: 1
CONTROL: 5 --- ADVISORY CONTROL: 2

Newsletter 20 Oct 2020
CONTROL: 6 --- ADVISORY CONTROL: 2

Blog post 20 Oct 2020
CONTROL: 6 --- ADVISORY CONTROL: 2
Daily tip

Always Assume You Have Something Cyber Criminals Want

You don’t need fame or millions in the bank to become the victim of cybercrime. Many cyber-criminals rely on automated attacks that seek out and compromise all vulnerable systems. Once a system is compromised, it can be used to distribute malware, send spam, or help launch a denial of service attack.