Welcome to the CIS 18 Control Framework
18 Okt 20251min
Episode 82 — Safeguard 18.2 – Internal and red team exercises
Safeguard 18.2 extends penetration testing to include internal assessments and red team exercises that emulate an attacker with initial access. Internal testing evaluates how far a threat could move l...
18 Okt 202512min
Episode 81 — Safeguard 18.1 – External testing programs
Safeguard 18.1 requires organizations to establish and maintain a formal penetration testing program that includes recurring external assessments. External tests simulate real-world attackers operatin...
18 Okt 202510min
Episode 80 — Overview – Why penetration testing validates defenses
Control 18—Penetration Testing—closes the CIS framework by validating how well all other controls perform under real-world conditions. While vulnerability scanning identifies potential weaknesses, pen...
18 Okt 202510min
Episode 79 — Remaining safeguards summary (Control 17)
The remaining safeguards in Control 17 reinforce the full lifecycle of incident response—spanning preparation, communication, testing, and continuous improvement. These include assigning key response ...
18 Okt 20259min
Episode 78 — Safeguard 17.2 – Tabletop exercises
Safeguard 17.2 emphasizes the importance of testing the incident response plan through structured tabletop exercises. These simulations bring together key personnel—from technical teams to executives—...
18 Okt 202510min
Episode 77 — Safeguard 17.1 – IR plan and playbooks
Safeguard 17.1 requires organizations to establish and maintain a comprehensive incident response process that defines scope, roles, responsibilities, and communication procedures. This process must i...
18 Okt 202510min
Episode 76 — Overview – Incident response principles
Control 17—Incident Response Management—defines how an organization prepares for, detects, responds to, and learns from security incidents. Even the most robust defenses can be breached, and when that...
18 Okt 202511min
