CIS Logo
tagline: Confidence in the Connected World

Privacy Impact Assessment (PIA) Companion to the CIS Controls

The following framework provides an outline for implementing a PIA for the CIS Controls.

Page Icon


An effective posture of enterprise cybersecurity need not and, indeed, should not compromise individual privacy. Many laws, regulations, guidelines, and recommendations exist to safeguard privacy, and enterprises will, in many cases, adapt their existing policies on privacy as they apply the CIS Controls Version 6.0.