Compliance Frameworks

CIS Controls v8.1

cis_controls_8.1

153 Requirements

1052 Checks

Description

The CIS Critical Security Controls (CIS Controls) v8.1 are a prioritized set of Safeguards to mitigate the most prevalent cyber-attacks against systems and networks. They are organized into 18 top-level Controls and mapped to three Implementation Groups (IG1, IG2, IG3). This is a cross-provider mapping of Prowler checks to the CIS Controls Safeguards that can be assessed automatically against cloud and platform configurations.

Check your compliance status

prowler aws --compliance cis_controls_8.1

Run in Prowler Cloud

Compliance Frameworks

CIS Controls v8.1

Description

Compliance MetadataEdit

Requirements

1. Inventory and Control of Enterprise Assets5 Requirements3 Checks

2. Inventory and Control of Software Assets7 Requirements11 Checks

3. Data Protection14 Requirements256 Checks

4. Secure Configuration of Enterprise Assets and Software12 Requirements162 Checks

5. Account Management6 Requirements68 Checks

6. Access Control Management8 Requirements124 Checks

7. Continuous Vulnerability Management7 Requirements34 Checks

8. Audit Log Management12 Requirements186 Checks

9. Email and Web Browser Protections7 Requirements24 Checks

10. Malware Defenses7 Requirements32 Checks

11. Data Recovery5 Requirements52 Checks

12. Network Infrastructure Management8 Requirements91 Checks

13. Network Monitoring and Defense11 Requirements138 Checks

14. Security Awareness and Skills Training9 Requirements0 Checks

15. Service Provider Management7 Requirements0 Checks

16. Application Software Security14 Requirements79 Checks

17. Incident Response Management9 Requirements6 Checks

18. Penetration Testing5 Requirements0 Checks