The Cost of Cyber Defense: CIS Controls IG1

Looking to implement cyber defenses? You probably want to know three things:

  1. Which protections will you start with?
  2. Which tools will be needed to implement those protections?
  3. How much will an implementation cost?

CIS has published this guide, The Cost of Cyber Defense: Implementation Group 1 (IG1), to help you answer those questions.

This guide organizes the CIS Safeguards of IG1, a subset of the CIS Critical Security Controls (CIS Controls) which helps you to establish essential cyber hygiene, into logical categories. It also identifies the types of tools needed to deploy and maintain these security actions.

To estimate the cost to implement these Safeguards, we researched the cost of licensing the commercial versions of the required tools for each of the 10 categories. Our estimate shows that obtaining and deploying commercially-supported versions of the tools should be less than 20% of the Information Technology (IT) budget for any size enterprise.

Download our guide below to see how realistic and cost effective it can be for you to achieve essential cyber hygiene.


CIS Whitepaper The Cost of Cyber Defense: CIS Controls IG1