CIS Controls Mapping to NCSC Cyber Essentials v3.2
Published on February 26, 2026
The methodology used to create the mapping can be useful to anyone attempting to understand the relationships between the CIS Controls and National Cyber Security Center (NCSC) Cyber Essentials CAF. The overall goal for CIS mappings is to be as specific as possible, leaning towards under-mapping versus over-mapping.
.png?rev=82fdca084e364d18aae4d57201b89348&hash=1491BF18011B7EA4ECE7F229E3A028B9)
As of June 23, 2025, the MS-ISAC has introduced a fee-based membership. Any potential reference to no-cost MS-ISAC services no longer applies.