Framework: The Center for Internet Security (CIS) Top 18 Controls

Framework: The Center for Internet Security (CIS) Top 18 Controls

The **CIS Critical Security Controls Audio Course** is a comprehensive, audio-first training series that guides listeners through all eighteen **CIS Controls**, transforming one of the world’s most respected cybersecurity frameworks into clear, actionable learning. Designed for professionals, students, and auditors alike, this series explains each control in practical, plain language—focusing on how to implement, assess, and sustain them in real environments. With eighty-three structured episodes, the course walks you step by step through the safeguards that define effective cybersecurity, helping you understand not only what to do but why each measure matters. The **CIS Controls**, maintained by the Center for Internet Security, represent a globally recognized set of prioritized actions proven to reduce the most common and dangerous cyber risks. Organized across eighteen control families—from inventory and configuration management to incident response and data recovery—the framework provides a practical roadmap for building defensible, risk-aligned security programs. This course explores how organizations can adopt the controls incrementally, measure maturity over time, and map them to other standards such as NIST, ISO 27001, and PCI DSS for comprehensive alignment. Developed by **BareMetalCyber.com**, the CIS Critical Security Controls Audio Course delivers structured, exam-aligned instruction that bridges policy and practice. Each episode reinforces understanding through real-world context, helping listeners translate framework requirements into measurable actions that strengthen organizational resilience and long-term security maturity.

Den här podcasten är hämtad från ett öppet RSS-flöde och publiceras inte av Podme. Den kan innehålla reklam.

Avsnitt(83)

Welcome to the CIS 18 Control Framework

Welcome to the CIS 18 Control Framework

18 Okt 20251min

Episode 82 — Safeguard 18.2 – Internal and red team exercises

Episode 82 — Safeguard 18.2 – Internal and red team exercises

Safeguard 18.2 extends penetration testing to include internal assessments and red team exercises that emulate an attacker with initial access. Internal testing evaluates how far a threat could move l...

18 Okt 202512min

Episode 81 — Safeguard 18.1 – External testing programs

Episode 81 — Safeguard 18.1 – External testing programs

Safeguard 18.1 requires organizations to establish and maintain a formal penetration testing program that includes recurring external assessments. External tests simulate real-world attackers operatin...

18 Okt 202510min

Episode 80 — Overview – Why penetration testing validates defenses

Episode 80 — Overview – Why penetration testing validates defenses

Control 18—Penetration Testing—closes the CIS framework by validating how well all other controls perform under real-world conditions. While vulnerability scanning identifies potential weaknesses, pen...

18 Okt 202510min

Episode 79 — Remaining safeguards summary (Control 17)

Episode 79 — Remaining safeguards summary (Control 17)

The remaining safeguards in Control 17 reinforce the full lifecycle of incident response—spanning preparation, communication, testing, and continuous improvement. These include assigning key response ...

18 Okt 20259min

Episode 78 — Safeguard 17.2 – Tabletop exercises

Episode 78 — Safeguard 17.2 – Tabletop exercises

Safeguard 17.2 emphasizes the importance of testing the incident response plan through structured tabletop exercises. These simulations bring together key personnel—from technical teams to executives—...

18 Okt 202510min

Episode 77 — Safeguard 17.1 – IR plan and playbooks

Episode 77 — Safeguard 17.1 – IR plan and playbooks

Safeguard 17.1 requires organizations to establish and maintain a comprehensive incident response process that defines scope, roles, responsibilities, and communication procedures. This process must i...

18 Okt 202510min

Episode 76 — Overview – Incident response principles

Episode 76 — Overview – Incident response principles

Control 17—Incident Response Management—defines how an organization prepares for, detects, responds to, and learns from security incidents. Even the most robust defenses can be breached, and when that...

18 Okt 202511min

Populärt inom Utbildning

husmodern-med-amanda-schulman
historiepodden-se
rss-bara-en-till-om-beroende-medberoende
det-skaver
rosceremoni
nu-blir-det-historia
harrisons-dramatiska-historia
rss-viktmedicinpodden
roda-vita-rosen
rss-dr-bjorklund
allt-du-velat-veta
not-fanny-anymore
sa-in-i-sjalen
sektledare
johannes-hansen-podcast
i-vantan-pa-katastrofen
rss-basta-livet
rss-max-tant-med-max-villman
rss-traningsklubben
sektpodden