In Safeguard 11.3, we talked about protecting recovery data with controls appropriate to the information it contains. A backup containing sensitive information is still sensitive information, and moving that data somewhere else doesn't reduce the organization's responsibility to protect it. Safeguard 11.4 asks a different question. What happens if the same event that takes down your production environment can also take down your backup? CIS Safeguard 11.4, Establish and Maintain an Isolated...
Configure Automatic Anti-Malware Signature Updates Anti-malware that isn't updating is a smoke detector with a dead battery. It's mounted on the...
Deploy and Maintain Anti-Malware Software Anti-malware is the one security control almost every business already believes it has. So the...
Use DNS Filtering Services Almost everything malicious has to make a phone call. A phishing link has to resolve to a web address. Malware has...
Ensure Use of Only Fully Supported Browsers and Email Clients Your web browser and your email client are the two applications your people use most,...
Ensure Adequate Audit Log Storage Here's a pattern that repeats in incident after incident. The investigation finally pinpoints the moment that...
Collect Audit Logs There's a predictable early move in a lot of intrusions: once an attacker is on a machine, they clear its local logs. If the only...
Establish and Maintain an Audit Log Management Process Every security investigation starts with the same question: what actually happened? In a lot...
Updates You're Probably Not Catching Your operating system is probably the best-patched software on your computers. Modern Windows and macOS update...
Why Patching Should Be a System, Not a Habit Almost no one argues against patching. Every leader I talk to already knows that unpatched systems are...
