Skip to content

CIS Consulting

CIS Top 18 Consulting

What is CIS Top 18 Consulting?

A CIS Top 18 audit is an assessment based on the Center for Internet Security (CIS) Critical Security Controls (CSCs). This framework is a set of best IT practices and guidelines to help businesses improve their cybersecurity posture. The CIS Critical Security Controls were previously called the CIS Top 20 and are now known as the CIS 18 Critical Security Controls.

Overview of CIS Top 18 Controls

The CIS Top 18 Critical Security Controls are in three categories: Basic, Foundational, and Organizational. Each section focuses on controls or actions to defend against the most common cybersecurity threats.

  • Basic Controls: Fundamental actions to protect against basic threats.
  • Foundational Controls: Essential measures to build a solid security foundation.
  • Organizational Controls: Strategic practices to manage and govern security effectively.

CIS Top 18 Process

A CIS 18 audit evaluates a business’s cybersecurity controls and IT practices against the CIS Critical Security Controls. The audit includes the following steps:

  1. Planning: We identify the scope of the audit, including the information systems, processes, and controls to test.
  2. Assessment:  We then review the business’s security practices, configurations, and policies against each CIS Control. We will gather evidence through interviews, documentation reviews, system scans, and observations.
  3. Gap Assessment: We identify gaps between the business’s security practices and the recommended CIS Controls. We also evaluate the risk associated with each gap and prioritize the issues.
  4. Reporting: This step requires us to create a report detailing the findings, including strengths, weaknesses, and specific areas for improvement.
  5. Remediate: We will help the IT team develop a plan to address the identified gaps and conduct follow-up assessments to verify the controls’ effectiveness.

By following the CIS Critical Security Controls, organizations can significantly reduce their risk of cyber threats and improve their overall cybersecurity defenses. A CIS 18 audit helps businesses improve weaknesses, ensuring they meet industry best practices and maintain a strong security program.

We were fortunate to have collaborated with Tanner IT Security Consultants. From the outset, John’s team exhibited a remarkable depth of knowledge and a clear understanding of our specific requirements.

Andy W. – Chief Information Security Officer

CIS Top 18 Consulting Services

At Tanner Security, we help your IT team understand and implement the Center for Internet Security (CIS) Critical Security Controls. As cybersecurity threats increase, it’s important to have strong security measures in place. Our CIS 18 Consulting team will guide you in effectively reviewing and implementing the CIS controls.

CIS Critical Security Controls

The CIS Critical Security Controls offer a prioritized framework of best practices to enhance your business’s cybersecurity posture. Below are a few reasons why you should choose our consulting services:

  1. Expertise: Our CIS consultants have extensive experience, over a decade of professional consulting work, and knowledge of all CIS controls.
  2. Customized Solutions: We tailor our services to align with your business’s needs, ensuring each control works.
  3. Risk Mitigation: We prioritize identified risks, protecting your organization from threats.
  4. Compliance: Implementing the CIS Critical Security Controls will often improve compliance with cybersecurity regulations and standards.

Take the Next Step

Take control of your cybersecurity and protect your organization from evolving threats.

Why Choose Tanner Security for CIS Consulting Services?

The CIS Critical Security Controls are a proven framework for enhancing your business’s cybersecurity program. Tanner Security is here to guide you through the process, providing consulting services that align with these controls.

  • Expertise: Our team has extensive experience in CIS compliance and security.
  • Comprehensive Solutions: We offer a full range of services to address every aspect of the CIS top 18 controls.
  • Customized Approach: We tailor our services to meet your business’s needs.
  • Proven Track Record: Our successful history in helping organizations achieve PCI compliance speaks for itself.

Ensure Your CIS 18 Compliance with Tanner Security

Partner with Tanner Security for expert CIS consulting services to ensure your business meets the highest security standards. Contact us today to learn more about our services and how we can help you achieve PCI DSS compliance.

Related Insights

View All