Testimonials

I see CIS Controls as being an extremely important tool in assisting organizations to protect their information assets. The [CIS] Controls provide a pragmatic and achievable set of requirements that are shown to reduce the level of information security-related risk.
Tony Krzyzewski, Director
SAM for Compliance Ltd
New Zealand

The CIS Controls definitely fills a gap where other leading frameworks gloss over and that is where we reference them.
Tom Cornelius, Senior Partner
Compliance Forge
Oregon, USA

In 2015, I came across the CIS Controls and fell in love with the CIS Controls spreadsheet. We adopted the CIS Controls as our framework going forward.
John Nord, Manager of IT and Business Systems
Corden Pharma
Germany

The CIS Controls helped us set a vision for the state and gave us a framework for the implementation.
Thomas Olmstead, CISO
State of Iowa
Iowa, USA

I’m a huge fan of the [CIS] Controls…CIS Controls provide a strong story and framework.
Christophe Demoor, CISM
Telenet
Belgium

This is where the [CIS Controls] are almost perfect for establishing a security baseline for smaller organizations.
James Jacobs, CEE
Crysis Averted
Virginia, USA

Start by taking care of the basics: build a solid cybersecurity foundation by implementing the [CIS Controls], especially application white-listing, standard secure configurations, reduction of administrative privileges, and a quick patching process.
Zurich Insurance Group
Risk Nexus: Overcome by cyber risks?
Economic benefits and costs of alternate cyber futures
Switzerland

I have found the CIS Implementation Groups (IG) to be very helpful when explaining to school officials and municipal leaders the steps or controls that need to be implemented to raise their security posture. Organizations that are just starting to implement cybersecurity can use IG 1 as the baseline. It is a very achievable set of controls for anyone to implement. As the organization matures or is looking to ramp up their posture IG2 and IG3 facilitate those next steps. Cybersecurity can be an overwhelming undertaking for organizations that lack the staff or knowledge. The CIS Controls take the guesswork out of what steps to implement. The Implementation Groups take an overwhelming list of controls and essentially turns them into a checklist that is very easy to understand.
Neal Richardson - CISSP, GCCC, GMOB, GCIH, GCIA, GSEC, Director of Technology
New Hampshire Hillsboro-Deering School District
New Hampshire, USA

Download the CIS Controls

CIS Benchmarks are very useful to apply security best practices on our platform and for the secure configuration of our system.

Information System Directorate
Financial Institution
South Africa

We needed to reach a security compliance for one of our clients and using CIS we were able to generate reports to prove our process.

Director of Information Technology
Spring Design Partners, Inc.
New York, USA

Thank you for your efforts to better secure the overall cyber environment.

Security Technical Architect
Asset Management & Business Processing Solution Company
Delaware, USA

CIS’ collaborative correlation between standards facilitates the time to market our supplied assets covered by the CIS Benchmarks.

Cyber Information Assurance Specialist
Defense Technology Company
Virginia, USA

Download the CIS Benchmarks

We work with sensitive information on a daily basis. The CIS Controls along with CIS-CAT Pro, a proven and indispensable tool, helps us to evaluate and maintain a security baseline for our IT infrastructure.

Sasawat Malaivongs, Business Director
ACinfotec
Thailand

Being SOC 2 compliant, adopting a hardening standard is required and we have found that CIS fits that requirement. The support of multiple operating systems is key in our environments and CIS provides that. For all of our systems, we are standardizing our hardening standards on CIS.

VP of IT
Small U.S. Business

Thank you for the services you provide, they are very valuable and appreciated.

Keith Guest, PMP, Computer Specialist
Information Services Division, Enterprise Services Center
A division of the Federal Aviation Administration
Washington D.C., USA

The CIS SecureSuite membership is the most important membership for the compliance reviews of information security available in the market today. It reduces labor cost to develop standards by comparing control effectiveness against CIS Benchmarks.

Senior Manager Information Security & Compliance: Internal IT
International Public Service Information & Communications Technology Agency
South Africa

We’re very happy with CIS and the work that you guys are doing to help businesses like ours develop and validate our security posture.

Information Security Officer
Payment Solution Company
Netherlands

Apply for a CIS SecureSuite Membership

Allgress currently uses the CIS Hardened Images in our deployments to eliminate almost all of the manual work when it comes to locking down our servers. It reduces time, cost and risk by not having to manually configure our servers from scratch.

Jeff Kushner, Chief Marketing Officer
Allgress

Based on the value, time and costs saving, I would not consider spinning up a AWS server without adding the CIS security to it for any production-level instance.

V.P. Application Lifecycle Management
CorTechs, Inc.

CIS images are continuously maintained by CIS to ensure configuration changes and patches are current and available so it saves us time and money.

Khaja Syed, President/CEO
CommunityForce

Using an industry standard offers time savings which is a huge benefit of using the CIS hardened images. We don’t have to build an image from scratch and then apply additional controls.

Waqasul Haq, Chief Security Architect
CommunityForce

The CIS images are cost effective and cover various operating systems which align well with our customers.

Jordan Thomas, VP Software and Services
CommunityForce

View CIS Hardened Images