CIS Critical Security Controls

CIS Safeguard 4.1 is the single highest-value security investment across all five top attack categories. That finding comes straight from the CIS Community Defense Model v3.0 and the 2026 Verizon DBIR. On October 22, Tony Sager and team will walk through what it means for how defenders prioritize. Register now: https://bit.ly/4j6NDkV #CISControls #Cybersecurity #AIThreats #CyberDefense

Last chance to register for the Secure by Design v1.1 webinar! This afternoon leaders from the Center for Internet Security and SAFECode.org will teach you how to assess software security practices, address AI-related risks, and build evidence-based approaches to secure software development. See you at 2:00 P.M. ET! https://bit.ly/4hB2wJM

What does Secure by Design look like in practice? Join CIS and SAFECode to hear from CIS leaders Curt Dukes and Phyllis Lee, software security pioneer Steve Lipner, and industry practitioner Robert E. Johnson, III from Cimcor. You'll learn how to assess software security practices, address AI-related risks, and build evidence-based approaches to secure software development. Register today: https://bit.ly/4hB2wJM #CISControls #SecurebyDesign

New in CIS CDM v3.0: the CIS Controls Active Defense Lifecycle. For security leaders, this adds a new dimension to prioritization decisions. Instead of asking "do we have coverage," you can ask "where in the attack chain do we have coverage, and where are we thin." That is a more useful question. Download CIS CDM v3.0: https://bit.ly/3TdVyT5 #CISControls #CyberDefense #MITREATTACK #CollectiveDefense

Can you prove your cyber defense program is "reasonable"? Regulators and privacy laws are demanding it. Most organizations can't demonstrate it. This on-demand webinar fromCenter for Internet Security shows you how to build and document a defensible program using the CIS Critical Security Controls and CIS SecureSuite Platform, so you're ready when it matters. https://bit.ly/4cQHdT6 #Cybersecurity #CISControls #GRC #DataPrivacy #InfoSec

You've read the reports. Attended the briefings. Ticked the boxes. So why are 3 out of 4 UK businesses still unprepared when an incident hits? Cyber resilience isn't a knowledge problem. It's an execution problem. And the organizations closing that gap aren't working harder, they're working smarter, with repeatable processes that assess, measure, and prove what's actually working. The UK government's Cyber Resilience Pledge is setting a new standard. The question isn't whether your organization should meet it. It's whether you have the tools to get there. Find out how to close the execution gap https://bit.ly/4Abnqrs #CyberResilience #UKCyber #CyberEssentials #CISControls #NCSC

The MS-ISAC community serves thousands of SLTT organizations that protect the systems Americans depend on every day. Now, we're taking the next step to strengthen those defenses. The Center for Internet Security and the MS-ISAC have joined forces with OpenAI on an AI Cyber Defense Pilot that will pair frontier AI technology with the operational expertise of SLTT cyber defenders. Participants will use AI to help identify and validate findings, prioritize remediation, and build a repeatable approach to strengthening cyber posture, all grounded in the CIS Critical Security Controls and essential cyber hygiene practices. What makes this initiative meaningful is who it's built for. Many of our member organizations carry enormous responsibility while defending complex environments with limited budgets and smaller teams. This pilot is designed to meet them where they are and scale what works. The lessons learned will extend beyond pilot participants, producing implementation guidance and recommendations to inform AI adoption across the broader public sector and critical infrastructure community. Read more: https://bit.ly/4gPmDUk #StateAndLocalGovernment #CriticalInfrastructure #AISecurity #CyberHygiene

We're excited to share Curt Dukes will be a panelist at the GlobalCISO Leadership Foundation event in New York City on September 10. As Executive Vice President of Security Best Practices at the Center for Internet Security, Curt has spent years helping organizations strengthen their cybersecurity programs through practical, prioritized approaches like the CIS Critical Security Controls. Join Curt and fellow cybersecurity leaders from 3:00-5:00 P.M. ETfor a discussion on today's threat landscape, cyber resilience, and why foundational cyber hygiene remains essential in the age of AI. Reserve your spot: https://bit.ly/4h3clBb #CISControls #CyberLeadership #CyberDefense #InfoSec

A cybersecurity program is only as strong as an organization's cyber hygiene. Join the Essential Cyber Hygiene Fundamentals bootcamp from the Center for Internet Security and ConnectSecure to learn how to strengthen your understanding of foundational security practices and cyber resilience. 📅 September 15-18, 2026 🕘 9:00 a.m. - 12:00 p.m. ET Develop practical skills, learn industry-recognized best practices, and gain insights you can apply to strengthen your organization's security posture. Register today: https://bit.ly/4wLEW3o #Cybersecurity #CyberHygiene #InfoSec #CyberDefense #CyberResilience