Center for Internet Security's Critical Security Controls Featured as Recommended Safeguard in Verizon's 2023 Data Breach Investigations Report

EAST GREENBUSH, N.Y.,  July 11, 2023 — The Center for Internet Security, Inc. (CIS®) is proud to announce that its CIS Critical Security Controls® (CIS Controls®) have been featured once again as a recommended safeguard in the Verizon 2023 Data Breach Investigations Report (DBIR).

The Verizon 2023 DBIR is widely recognized across the cybersecurity industry for its comprehensive analysis of the global threat landscape, based on real-world data from actual security incidents and breaches. It serves as an authoritative source of information for organizations seeking to enhance their cybersecurity defenses and make better informed risk management decisions.

As a trusted leader in the cybersecurity community, CIS has long been committed to promoting best practices and providing actionable guidance to organizations of all sizes. The inclusion of the CIS Controls in Verizon's DBIR underscores the significance and effectiveness of these Controls in mitigating cyber threats and safeguarding critical assets.

The CIS Controls are a prioritized set of security measures that organizations can implement to significantly reduce their risk of cyber attacks.

“The inclusion of the CIS Controls in the Verizon 2023 DBIR serves as a testament to their practicality and effectiveness,” said Phyllis Lee, CIS Vice President of Security Best Practices Content Development. “By implementing these Controls, organizations can prioritize their security efforts, optimize resource allocation, and better fortify their defenses against prevalent threats such as ransomware, phishing, and insider attacks.”

“Strength through collaboration is at the very heart of the Verizon Data Breach Investigations Report,” noted Philippe Langlois, Lead Data Scientist for the Verizon DBIR. “Cybersecurity is a threat that we all face, and as such cannot be effectively addressed by any single organization. Our work with CIS and other collaborating organizations helps Verizon DBIR readers to take steps in moving the security posture of their enterprises forward.”

Join CIS and Verizon for a free webinar titled, “Leveraging the Verizon 2023 DBIR: Key Insights and Actionable Takeaways” on July 20, 2023 from 2:00–3:30 p.m. ET. The webinar will highlight the collaboration efforts between CIS and Verizon, key insights and findings from this year’s report, how to leverage the data from the 2023 report, and more.

Register for the webinar here.

Organizations looking to enhance their cybersecurity can access the CIS Controls through In addition, the full Verizon 2023 DBIR, including the recommended Safeguards and insights from CIS, is available for download at

For more information, contact CIS Media Relations Manager, Kelly Wyland, at [email protected] or (518) 256-6978.


About CIS

The Center for Internet Security, Inc. (CIS®) makes the connected world a safer place for people, businesses, and governments through our core competencies of collaboration and innovation. We are a community-driven nonprofit, responsible for the CIS Controls® and CIS Benchmarks™, globally recognized best practices for securing IT systems and data. We lead a global community of IT professionals to continuously evolve these standards and provide products and services to proactively safeguard against emerging threats. Our CIS Hardened Images® provide secure, on-demand, scalable computing environments in the cloud. CIS is home to the Multi-State Information Sharing and Analysis Center® (MS-ISAC®), the trusted resource for cyber threat prevention, protection, response, and recovery for U.S. State, Local, Tribal, and Territorial government entities, and the Elections Infrastructure Information Sharing and Analysis Center® (EI-ISAC®), which supports the rapidly changing cybersecurity needs of U.S. elections offices. To learn more, visit or follow us on Twitter: @CISecurity.