Welcome to the CIS 18 Control Framework
18 Loka 20251min
Episode 82 — Safeguard 18.2 – Internal and red team exercises
Safeguard 18.2 extends penetration testing to include internal assessments and red team exercises that emulate an attacker with initial access. Internal testing evaluates how far a threat could move l...
18 Loka 202512min
Episode 81 — Safeguard 18.1 – External testing programs
Safeguard 18.1 requires organizations to establish and maintain a formal penetration testing program that includes recurring external assessments. External tests simulate real-world attackers operatin...
18 Loka 202510min
Episode 80 — Overview – Why penetration testing validates defenses
Control 18—Penetration Testing—closes the CIS framework by validating how well all other controls perform under real-world conditions. While vulnerability scanning identifies potential weaknesses, pen...
18 Loka 202510min
Episode 79 — Remaining safeguards summary (Control 17)
The remaining safeguards in Control 17 reinforce the full lifecycle of incident response—spanning preparation, communication, testing, and continuous improvement. These include assigning key response ...
18 Loka 20259min
Episode 78 — Safeguard 17.2 – Tabletop exercises
Safeguard 17.2 emphasizes the importance of testing the incident response plan through structured tabletop exercises. These simulations bring together key personnel—from technical teams to executives—...
18 Loka 202510min
Episode 77 — Safeguard 17.1 – IR plan and playbooks
Safeguard 17.1 requires organizations to establish and maintain a comprehensive incident response process that defines scope, roles, responsibilities, and communication procedures. This process must i...
18 Loka 202510min
Episode 76 — Overview – Incident response principles
Control 17—Incident Response Management—defines how an organization prepares for, detects, responds to, and learns from security incidents. Even the most robust defenses can be breached, and when that...
18 Loka 202511min
