Center for Internet Security (CIS)

As government systems become more interconnected, unsecure software can put critical services and infrastructure at risk. Discover practical ways to strengthen software assurance across SLTT systems.

The CIS Controls are used worldwide and developed through a community consensus process. In this case study, PC Pharm leveraged the Controls with CIS RAM to help finance and SMB clients build a strong cybersecurity foundation that supports work with regulated entities.

Alan Paller spent his career challenging assumptions and pushing our community to find practical ways to strengthen cybersecurity. In his memory, the Alan Paller Laureate Program was created to uncover and support bold new ideas that make a real impact. Apply now!

GenAI is increasing the availability of complex tools that enable threat actors to turn malware development into a commodity. Check out our podcast for insights on what this means for the threat landscape.

Public sector missions depend on secure, trusted software to deliver essential services and uphold public trust. Learn how strengthening software assurance can support policy enforcement across SLTT environments.

Don't miss out on these speaking sessions at RSAC 2026! Are you attending? Let us know!

When one IT professional supports an entire K–12 district, the pressure is real. Thousands of devices, multiple campuses, and constant security risks are often the responsibility of one person to manage it all. The MS-ISAC is a trusted partner K-12s can lean on for support.

Social engineering ... credential abuse ... Living off the Land techniques ... all common hallmarks of Iranian operational tradecraft. Here's how to defend your organization: bit.ly/4rWkydF #cybersecurity #phishing

True: Many anti-phishing filters have a hard time picking up on callback phishing attempts. False: Your organization is powerless to defend against callback phishing. Your cybersecurity posture hinges on the awareness of your employees. Listen to the full podcast to learn more.

Compliance teams at MSPs and MSSPs are often stretched thin. A framework that is prescriptive, prioritized, and simplified can make it easier to maintain consistent safeguards across many client environments.

All CISOs: 🏃‍♀️ Run and fall 🤕 Make mistakes 💪 Build experience from it all So why not discuss this experience openly? Listen to our podcast episode to learn how we at CIS encourage this wisdom sharing.

Ready to strengthen your security program? Join us March 10 at 11 AM ET to learn how to effectively implement the CIS Benchmarks & CIS Controls using a CIS SecureSuite Membership. Don’t miss it!

Alan Paller’s influence lives on in the ideas that strengthen our shared defense. The Laureate Program continues his mission by backing projects that improve cybersecurity in practical, measurable ways. Apply by the end of March!

Learn how the MS-ISAC serves as a U.S. SLTT strategic partner, bridging gaps in security capability and capacity and offering many organizations access to affordable services and vital protections that they wouldn’t have access to otherwise.

We've updated the following CIS Benchmarks. View the blog post for the full changelog.

Every CIS Controls Ambassador has different thoughts and interests. We takes those different thoughts, put them into a structure, and enable each CIS Controls Ambassador to contribute more in depth. Learn how a CIS Controls Ambassador contributed to reasonable cybersecurity.

Secure by Design helps vendors anticipate risk early and embed security throughout the product lifecycle. It’s a practical way to build more resilient software that customers can trust. We've developed guidance to help.

MSPs/MSSPs: Looking for a stronger, easier path to security implementation and compliance? This case study shows how one provider used the CIS Controls to simplify operations and improve outcomes for a finance client.

When you can't afford to make a mistake, you must use human in the loop (HITL) to shape your strategic implementation of AI. Listen to episode 171 of our podcast to learn what this means for state and local governments looking to secure critical infrastructure.

Have a cybersecurity project that can move the needle for organizations and communities? The Alan Paller Laureate Program was built to support exactly that kind of work. Apply today!