White Papers

Download guides, security framework mappings, and other documents

Published on 04.28.2023

Acceptable Use Policy Template for the CIS Controls

CIS has released an Acceptable Use Policy Template that's meant to supplement the CIS Critical Security Controls (CIS Controls) v8.

Published on 04.18.2023

Living Off the Land: Scheduled Tasks

Living off the Land (LotL) attacks involve the use of existing tools and tactics on targeted systems or networks to carry out a cyber attack, ren...

Published on 04.10.2023

Cybersecurity Quarterly Spring 2023

The Spring 2023 issue of Cybersecurity Quarterly focuses on collaboration, with articles discussing the 20th anniversary of the MS-ISAC, our coll...

Published on 03.31.2023

2022 Year in Review

For CIS, 2022 was a year of tremendous growth and major accomplishments. Our 2022 Year in Review tells the full story.

Published on 03.31.2023

Security Awareness Skills Training Policy Template for CIS Control 14

CIS has released a Security Awareness Training Policy Template to supplement CIS Control 14 of the CIS Critical Security Controls v8.

Published on 03.28.2023

RABET-V Final Pilot Summary and Next Steps

CIS wraps up the final pilot of RABET-V as it works to make the process a permanent, operational interest within the election community.

Published on 03.22.2023

Data Recovery Policy Template for CIS Control 11

CIS has released a Data Recovery Policy Template to supplement CIS Control 11 of the CIS Critical Security Controls v8.

Published on 03.22.2023

Incident Response Policy Template for CIS Control 17

CIS has released an Incident Response Policy Template for CIS Control 17 of the CIS Critical Security Controls v8.

Published on 03.22.2023

Service Provider Management Policy Template for CIS Control 15

CIS has released a Service Provider Management Policy Template for CIS Control 15 of the CIS Critical Security Controls v8.

Published on 03.22.2023

Malware Defense Policy Template for CIS Control 10

CIS has released a Malware Defense Policy Template for CIS Control 10 of the CIS Critical Security Controls v8.

Explore Related Cybersecurity Solutions

Safeguard IT systems against cyber threats with more than 100 configuration guidelines across more than 25 vendor product families.

Learn More

Protect your organization from cyber-attacks with globally recognized CIS Controls, companion guides, and mappings.

CIS CyberMarket

CIS Hardened Images

CIS SecureSuite

CIS Services

Access resources for threat prevention, protection, response, and recovery for U.S. State, Local, Tribal, and Territorial (SLTT) government entities.

Learn More

Access resources for threat prevention, protection, response, and recovery for U.S. State, Local, Tribal, and Territorial (SLTT) government entities.

Learn More

See All Solutions

Filter by Topic

Explore Related Cybersecurity Solutions