Critical Security Controls Version 8

Formerly known as the SANS Critical Controls, the Critical Security Controls published by the Center for Internet Security are designed to be fundamental controls for all organizations. The 18 controls included in the set are intended to be the basis for any information security program.

  • xThreat Vector: Denial of Service
IDNameImplementation GroupsThreats
IG1IG2IG3
8Audit Log Management   STRIDE-LM
8.3Ensure Adequate Audit Log Storage•••STRIDE-LM
11Data Recovery   STRIDE-LM
11.2Perform Automated Backups•••STRIDE-LM
11.3Protect Recovery Data•••STRIDE-LM
11.4Establish and Maintain an Isolated Instance of Recovery Data•••STRIDE-LM
11.5Test Data Recovery ••STRIDE-LM
12Network Infrastructure Management   STRIDE-LM
12.1Ensure Network Infrastructure is Up-to-Date•••STRIDE-LM