CIS Controls v8 Mapping to ISO/IEC 27001:2022

Published on February 24, 2023

This document contains mappings of the CIS Controls and Safeguards v8 to ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) 27001:2022.


CIS Controls v8 Mapping to ISO/IEC 27001:2022 cover image

As of June 23, 2025, the MS-ISAC has introduced a fee-based membership. Any potential reference to no-cost MS-ISAC services no longer applies.