Coming mid-July
Cybrary Reimagined.
People first, Security first.
Coming mid-July.
Cybrary Reimagined.
Celebrate Cybersecurity Awareness Month with our buy 2, get 1 offer!
People first, Security first.
Valid until October 31. Elevate your skills today!
Start for free
Free

CIS Top 20 Critical Security Controls

CIS Controls are a prioritized set of actions that protect your organization and data from known cyber-attack vectors. Our CIS Top 20 Critical Security Controls Course aligns to CIS v7.1. Learn about each control, why it’s important to your organization, and how you can help your team implement these best practices.
8
24
M
Time
intermediate
difficulty
10
ceu/cpe

Course Content

Introduction

2m

Introduction
Overview of Control 1

5m

Control 1: Inventory and Control of Hardware Assets
Overview of Control 2

5m

Control 2: Inventory and Control of Software Assets
Overview of Control 3

6m

Control 3: Continuous Vulnerability Management
Overview of Control 4

7m

Control 4: Controlled Use of Administrative Privileges
Overview of Control 5

4m

Control 5: Secure Configuration for Hardware and Software on Mobile Devices, Laptops, Workstations, and Servers
Overview of Control 6

4m

Control 6: Maintenance, Monitoring, and Analysis of Audit Logs
Overview of Control 7

6m

Control 7: Email and Web Browser Protections
Overview of Control 8

5m

Control 8: Malware Defenses
Overview of Control 9

4m

Control 9: Limitation and Control of Network Ports, Protocols, and Services
Overview of Control 10

5m

Control 10: Data Recovery Capabilities
Overview of Control 11

7m

Control 11: Secure Configuration for Network Devices, Such as Firewalls, Routers, and Switches
Overview of Control 12

6m

Control 12: Boundary Defense
Overview of Control 13

5m

Control 13: Data Protection
Overview of Control 14

5m

Control 14: Controlled Access Based on the Need to Know
Overview of Control 15

5m

Control 15: Wireless Access Control
Overview of Control 16

8m

Control 16: Account Monitoring and Control
Overview of Control 17

4m

Control 17: Implement a Security Awareness and Training Program
Overview of Control 18

6m

Control 18: Application Software Security
Overview of Control 19

5m

Control 19: Incident Response and Management
Overview of Control 20

5m

Control 20: Penetration Tests and Red Team Exercises
What SME's Need to Know About CIS

7m

What Small and Medium Enterprises (SME) Need to Know about the CIS Controls
Conclusion

1m

Conclusion
Control 1 Mapping to the NIST Cybersecurity Framework

4m

Control 1: Inventory and Control of Hardware Assets
Course Description

These security controls can be combined with frameworks, like NIST SP 800-37 (The NIST Risk Management Framework-RMF) to provide organizations with defense-in-depth best practices.

This course may help prepare students for industry certifications around the CIS Security Controls.The course will cover an overview of each control, map the controls to the NIST Cybersecurity Framework, and students will gain hands-on practice through labs in this course.

Prerequisites

Students should be familiar with common IT and cybersecurity terminology. It is recommended that students have 1-2 years of experience working in the cybersecurity industry.

Course Goals

By the end of this course, students should be able to:

  • Understand what the 20 CIS security controls are
  • * Understand how each control maps to the NIST Cybersecurity Framework

    This course is part of a Career Path:
    No items found.

    Instructed by

    No items found.
    Provider
    Cybrary Logo
    Certification Body
    Certificate of Completion

    Complete this entire course to earn a CIS Top 20 Critical Security Controls Certificate of Completion