The CIS Critical Security Controls v8.1 provide 18 prioritised controls with safeguards organised into implementation groups (IG1 to IG3), with IG1 as essential cyber hygiene. We use them to give smaller organisations a practical starting point and to strengthen technical controls under ISO 27001.
Who it is for
- SMEs needing a practical security baseline
- IT teams prioritising technical controls
What you gain
- Clear priorities for limited budgets
How we help you apply it
Maturity review
Assess current practice against the guidance and agree what good looks like for your organisation.
Framework design
Translate the principles into a practical framework, roles and tools that fit your existing management systems.
Embedding
Workshops and coaching so teams apply the framework in day-to-day decisions.
Review and reporting
Periodic reviews and reporting that show progress to leadership and stakeholders.
CIS Controls v8.1 questions
Where should a small company start?
Implementation Group 1 (essential cyber hygiene) covers the safeguards every organisation should have.