In Safeguard 11.1, we talked about establishing a data recovery process. Before something fails, the organization needs to understand what has to be recovered, what comes back first, who's responsible, and how recovery is supposed to work. Safeguard 11.2, Perform Automated Backups, takes the next step. CIS requires automated backups of in-scope enterprise assets at least weekly, or more frequently based on the sensitivity of the data. The word "automated" is important. If protecting critical...
CIS IG1 Control 9.2: Hanging Up the Call Before It Connects
Use DNS Filtering Services Almost everything malicious has to make a phone call. A phishing link has to resolve to a web address. Malware has...
CIS IG1 Control 9.1: An Unsupported Application Is One the Vendor Has Stopped Defending
Ensure Use of Only Fully Supported Browsers and Email Clients Your web browser and your email client are the two applications your people use most,...
CIS IG1 Control 8.3: The Log You Need Is Always the One That Already Rolled Off
Ensure Adequate Audit Log Storage Here's a pattern that repeats in incident after incident. The investigation finally pinpoints the moment that...
CIS IG1 Control 8.2: A Log You Can’t Reach Is a Log You Can’t Trust
Collect Audit Logs There's a predictable early move in a lot of intrusions: once an attacker is on a machine, they clear its local logs. If the only...
CIS IG1 Control 8.1: The Question Every Investigation Starts With
Establish and Maintain an Audit Log Management Process Every security investigation starts with the same question: what actually happened? In a lot...
Top Technology Concerns CEOs Are Facing (And Why the Real Risk Isn’t the Technology)
The Top Technology Concerns CEOs Are Facing Today (And Why the Real Risk Isn't the Technology) If you'd asked most CEOs a few years ago what kept...
CIS IG1 Control 7.4: Perform Automated Application Patch Management
Updates You're Probably Not Catching Your operating system is probably the best-patched software on your computers. Modern Windows and macOS update...
CIS IG1 Control 7.3: Perform Automated Operating System Patch Management
Why Patching Should Be a System, Not a Habit Almost no one argues against patching. Every leader I talk to already knows that unpatched systems are...
CIS Safeguard 7.2: Finding the Problem Is Only the Beginning
In Safeguard 7.1, we discussed the difference between running a vulnerability scanner and operating a vulnerability management program. A scan may...
