CIS Controls v8 Cloud Companion Guide

Published on March 25, 2022

While many of the core security concerns of enterprise IT systems are shared within cloud environments, the main challenge in applying best practices is tied to the fact that these systems typically operate software and hardware under different assumed security responsibilities.

As the CIS Critical Security Controls continue to be refined and re-worked through the community, the call for CIS Controls guidance for the cloud was identified as one of thehigh priority companion documents to be developed.

CiS Controls v8 Cloud Companion Guide

As of June 23, 2025, the MS-ISAC has introduced a fee-based membership. Any potential reference to no-cost MS-ISAC services no longer applies.