CIS Critical Security Controls v7.1

Controls v7.1 was enhanced to ensure that every CIS Control is clear, concise, and current. This version set the foundation for a much more straightforward and manageable way to implement, measure, and automate the Controls. Specifically, v7.1 addressed the growing need for assistance with prioritizing and phasing in the CIS Controls into an enterprise's cybersecurity program with the creation of Implementation Groups (IGs). As such, the following principles were used to drive the v7.1 update.

• Reassess the prioritization scheme for the CIS Controls down to the level of Sub-Controls (now referred to as CIS Safeguards beginning in v8) given the evolving threat landscape and resource constraints;
• Fix minor typos and errors;
• Enhance the clarity and readability of the CIS Controls and Sub-Controls; and
• Refrain from adding or subtracting from the technical content, or “spirit,” of a CIS Control or Sub-Control.

When you download v7.1, you will receive:

• PDF
• Excel
• Change Log
• Implementation Groups

Controls v7.1 is available in these translations:

• Spanish
• Lithuanian
• Italian
• Japanese
• Estonian

Have Questions? We’re here to help. Go to Controls FAQs.