Practical Guidance for Implementing the CIS Controls (V.6)

When some organizations are introduced to the CIS Controls, they may become discouraged thinking that the Controls reflect too high a bar and are unachievable for their organization. In practice, this could not be further from the truth; however, successful implementation of the Controls will require many organizations to shift their mindset on security and how they approach IT operations and defense.