Carefully test all application software for security flaws.Malware Defenses Block malicious code from altering system settings or contents, capturing data or spreading Īpplication Software Security Neutralize vulnerabilities in web-based and other application software Why Is This Control Critical Attackers continuously scan target organizations looking for vulnerable versions of software that can be remotely exploited. Vulnerability Assessment Positively identify and repair software vulnerabilities reported by researchers and vendors On all new systems deployed in the enterprise.Secure Configurations Prevent attacks from exploiting services and settings that allow easy access through networks and browsers Virtualize major enterprise applications Figure 1 (on the next page) lists the Controls in the CIS latest version, Version 7.0.Track software installations – type version and patch level.CIS Controls v8 has been enhanced to keep up with modern systems and software. Inventory of SoftwareAuthorized & Unauthorized Identify vulnerable and malicious software to prevent and mitigate attacks CIS Critical Security Controls v7.1 CIS Critical Security Controls v8 is now available The CIS Critical Security Controls (CIS Controls) have been updated to keep up with the ever-changing cyber ecosystem. Up-to-date device inventory on the network.

Inventory of DevicesAuthorized & Unauthorized Reduce the ability of attackers to find and exploit unauthorized and unprotected systems Critical Security Controls SANS Initiative

Critical security controls version 7