Critical Security Controls Version 8.1

Formerly known as the SANS Critical Controls, the Critical Security Controls published by the Center for Internet Security are designed to be fundamental controls for all organizations. The 18 controls included in the set are intended to be the basis for any information security program.

Critical Security Controls Version 8.1
IDNameImplementation GroupsThreats
IG1IG2IG3
3.14Log Sensitive Data Access  •STRIDE-LM
8Audit Log Management   STRIDE-LM
8.1Establish and Maintain an Audit Log Management Process•••STRIDE-LM
8.2Collect Audit Logs•••STRIDE-LM
8.3Ensure Adequate Audit Log Storage•••STRIDE-LM
8.4Standardize Time Synchronization ••STRIDE-LM
8.5Collect Detailed Audit Logs ••STRIDE-LM
8.8Collect Command-Line Audit Logs ••STRIDE-LM
8.9Centralize Audit Logs ••STRIDE-LM
8.10Retain Audit Logs ••STRIDE-LM
8.11Conduct Audit Log Reviews ••STRIDE-LM
8.12Collect Service Provider Logs  •STRIDE-LM
12.5Centralize Network Authentication, Authorization, and Auditing (AAA) ••STRIDE-LM
13.1Centralize Security Event Alerting ••STRIDE-LM