CIS Controls v8.1 Mapping to NIST SP 800-172 Rev. 3

Published on September 14, 2026

This document provides mappings between the CIS Critical Security Controls® (CIS Controls) and CIS Safeguards and NIST SP 800-172 Rev. 3. It enables organizations to quickly identify how CIS Controls align with NIST's enhanced security requirements, supporting cybersecurity program development, compliance efforts, gap assessments, and framework crosswalk activities.

The mappings are based on CIS's established methodology, which evaluates the relationship between each CIS Safeguard and corresponding NIST SP 800-172 Rev. 3 requirements to deliver clear, actionable alignment information.

Last Updated: July 2026

CIS Controls v8.1 Mapping to NIST SP 800-172 Rev. 3

As of June 23, 2025, the MS-ISAC has introduced a fee-based membership. Any potential reference to no-cost MS-ISAC services no longer applies.