CIS Controls v8

The CIS Controls are a prioritized set of 18 safeguards, maintained by the Center for Internet Security, that defend against the most common attack patterns.

CIS Controls v8 distills cybersecurity best practice into 18 controls (and implementation groups sized to organizational maturity), from inventory and access control to data protection and incident response. They're prescriptive and measurable, which makes them popular with mid-market teams.

Vigil references the specific CIS Control behind each finding, giving teams a concrete, widely-recognized safeguard to implement.