What's New with the CIS Controls v8
summary
Version 8 condenses the previous 20 controls into 18 controls, elevates data discovery and protection to control 3: data protection, and adds a dedicated cloud services control while merging several network and monitoring items. It ships companion guides (including a cloud guide), a free AuditScripts gap analysis for mapping current state to v8, and IG1–IG3 implementation tiers. Recommendations include weekly vulnerability scanning, leveraging existing agents (Windows Defender, Wazuh), and starting with hardware/software/data inventories to make later controls feasible.
AI-written summary · about
chapters (11)
- 0:00Start
- 0:50Overview
- 6:31Practical Implementation Steps
- 10:36Network Monitoring and Defense
- 11:33Cloud Services
- 13:13Supplemental Guides and Tools
- 14:34Implementation Groups
- 19:14Practical Implementation Tips
- 20:06Gap Analysis
- 24:12Minimum Security Standards
- 27:26Malware Defense
related talks
24mSecurity Compliance as Code
32mThe One About Controls
45mFrom Attacks to Action: An Open Community Model to Drive Defensive Choices
15mSecurely configure your AWS environments with CIS & Qualys
26m📗 Cringe, Corrected: Hot Takes Fixed by the CIS Controls ⚖️
32mIntroduction to CDD and Security Centric System Design
35mRevolutionizing Cyber Defense: The NIST CSF 2.0 Advantage
48mControlling Clouds: Beyond Safety