Critical Security Controls Version 7.1

The Critical Security Controls published by the Center for Internet Security are designed to be fundamental controls for all organizations. The 20 controls included in the set are intended to be the basis for any information security program.

Critical Security Controls Version 7.1
IDNameImplementation GroupsThreats
IG1IG2IG3
2.8Implement Application Whitelisting of Libraries  •STRIDE-LM
5Secure Configuration for Hardware and Software on Mobile Devices, Laptops, Workstations and Servers   STRIDE-LM
5.1Establish Secure Configurations•••STRIDE-LM
5.2Maintain Secure Images ••STRIDE-LM
5.3Securely Store Master Images ••STRIDE-LM
5.4Deploy System Configuration Management Tools ••STRIDE-LM
5.5Implement Automated Configuration Monitoring Systems ••STRIDE-LM
10Data Recovery Capabilities   STRIDE-LM
10.4Protect Backups•••STRIDE-LM
10.5Ensure All Backups Have at Least One Offline Backup Destination•••STRIDE-LM
11.3Use Automated Tools to Verify Standard Device Configurations and Detect Changes ••STRIDE-LM
13Data Protection   STRIDE-LM
18Application Software Security   STRIDE-LM
18.1Establish Secure Coding Practices ••STRIDE-LM
18.10Deploy Web Application Firewalls ••STRIDE-LM