Applying the CIS Controls outside the traditional office network and for specific kinds of organization: the cloud, mobile and IoT companion guides, MSPs and consultants delivering the Controls to clients, and state and local government.
How CIS says to apply the Controls in cloud environments from the customer side: what the v8.1 Cloud Companion Guide covers, how it is structured, infrastructure as code under Safeguard 4.6, service providers under Control 15 and cloud Benchmarks.
Applying the CIS Controls to phones and tablets: the Mobile Companion Guide's structure, BYOD, COPE and fully managed models, EMM, MDM and threat defense tools, and the mobile-specific Safeguards for lockout, remote wipe and work profiles.
How CIS applies the Controls to enterprise IoT devices: device types in scope, why IoT is hard to secure, how the guide rates each Safeguard's applicability, and the inventory and configuration Safeguards that still apply.
What service providers need to deliver the CIS Controls to clients: the SecureSuite Controls membership and CSAT Pro, why End User membership cannot be used for clients, CREST-backed accreditation, hardened image reselling and client-side Safeguards for providers.
How US state, local, tribal and territorial governments use the CIS Controls: free SecureSuite membership, the change to fee-based MS-ISAC membership, Navigator mappings to CISA goals and CJIS, and IG1 as a starting point.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.