Back to Compliances
stackit

CIS Controls v8.1

cis_controls_8.1
CIS-Controlsv8.1
CIS-Controls framework logo
OfficialVerified

The CIS Critical Security Controls (CIS Controls) v8.1 are a prioritized set of Safeguards to mitigate the most prevalent cyber-attacks against systems and networks. They are organized into 18 top-level Controls and mapped to three Implementation Groups (IG1, IG2, IG3). This is a cross-provider mapping of Prowler checks to the CIS Controls Safeguards that can be assessed automatically against cloud and platform configurations.

4requirements6checks
Prowler logoProwlerprowler-compliance-cis-controls

Run this compliance with Prowler

Run in Prowler Cloud
Run
prowler stackit --compliance cis_controls_8.1

Requirements (4)

3. Data Protection12
3.4Retain data according to the enterprise's documented data management process. Data retention must include both minimum and maximum timelines.2
Attributes
Section
  1. Data Protection
Function

Protect

Asset Type

Data

Implementation Groups

  • IG1

  • IG2

  • IG3

4. Secure Configuration of Enterprise Assets and Software14
4.4Implement and manage a firewall on servers, where supported. Example implementations include a virtual firewall, operating system firewall, or a third-party firewall agent.4
Attributes
Section
  1. Secure Configuration of Enterprise Assets and Software
Function

Protect

Asset Type

Devices

Implementation Groups

  • IG1

  • IG2

  • IG3

11. Data Recovery11
11.3Protect recovery data with equivalent controls to the original data. Reference encryption or data separation, based on requirements.1
Attributes
Section
  1. Data Recovery
Function

Protect

Asset Type

Data

Implementation Groups

  • IG1

  • IG2

  • IG3

13. Network Monitoring and Defense14
13.4Perform traffic filtering between network segments, where appropriate.4
Attributes
Section
  1. Network Monitoring and Defense
Function

Protect

Asset Type

Network

Implementation Groups

  • IG2

  • IG3