Critical Security Controls Version 8.1

Formerly known as the SANS Critical Controls, the Critical Security Controls published by the Center for Internet Security are designed to be fundamental controls for all organizations. The 18 controls included in the set are intended to be the basis for any information security program.

Critical Security Controls Version 8.1
IDNameImplementation GroupsThreats
IG1IG2IG3
18.3Remediate Penetration Test Findings ••STRIDE-LM
18.4Validate Security Measures  •STRIDE-LM
18.5Perform Periodic Internal Penetration Tests  •STRIDE-LM