Critical Security Controls Version 8.1

Formerly known as the SANS Critical Controls, the Critical Security Controls published by the Center for Internet Security are designed to be fundamental controls for all organizations. The 18 controls included in the set are intended to be the basis for any information security program.

Critical Security Controls Version 8.1
IDNameImplementation GroupsThreats
IG1IG2IG3
4.7Manage Default Accounts on Enterprise Assets and Software•••STRIDE-LM
5.2Use Unique Passwords•••STRIDE-LM
12Network Infrastructure Management   STRIDE-LM
12.2Establish and Maintain a Secure Network Architecture ••STRIDE-LM
12.8Establish and Maintain Dedicated Computing Resources for All Administrative Work  •STRIDE-LM
13Network Monitoring and Defense   STRIDE-LM
13.4Perform Traffic Filtering Between Network Segments ••STRIDE-LM
13.6Collect Network Traffic Flow Logs ••STRIDE-LM
16.8Separate Production and Non-Production Systems ••STRIDE-LM
18.5Perform Periodic Internal Penetration Tests  •STRIDE-LM