CIS Controls v8 Mapping to ISO/IEC 27002:2022

CIS Controls

Published on April 21, 2022

This document contains mappings of the CIS Controls and Safeguards to ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) 27002:2022 - Information Security, cybersecurity and privacy protection - Information security controls

CIS-Controls-v8-Mappings-To-ISO-IEC-27002:2002

As of June 23, 2025, the MS-ISAC has introduced a fee-based membership. Any potential reference to no-cost MS-ISAC services no longer applies.