Critical Security Controls Version 7.1

The Critical Security Controls published by the Center for Internet Security are designed to be fundamental controls for all organizations. The 20 controls included in the set are intended to be the basis for any information security program.

Critical Security Controls Version 7.1
IDNameImplementation GroupsThreats
IG1IG2IG3
4.8Log and Alert on Changes to Administrative Group Membership ••STRIDE-LM
6Maintenance, Monitoring and Analysis of Audit Logs   STRIDE-LM
6.2Activate Audit Logging•••STRIDE-LM
6.3Enable Detailed Logging ••STRIDE-LM
6.5Central Log Management ••STRIDE-LM
6.6Deploy SIEM or Log Analytic Tools ••STRIDE-LM
6.7Regularly Review Logs ••STRIDE-LM
7.6Log All URL requester ••STRIDE-LM
8.8Enable Command-Line Audit Logging ••STRIDE-LM
14.9Enforce Detail Logging for Access or Changes to Sensitive Data  •STRIDE-LM