Center For Internet Security Updates CIS Controls With Focus On Cloud, Mobile, And Remote Work

Now is a great time to review your security posture, as you have a new tool to help you. On May 18, 2021, the Center for Internet Security (CIS) released Version 8 of its CIS Controls, formerly known as the CIS Critical Security Controls (and often called the "CIS Top 20").

CIS intends the new version to better address some of the major developments in IT and cybersecurity over the past several years, including the movement to cloud solutions, increased mobility, and normalization of remote work. CIS is also updating the ecosystem of tools that support the Controls, including self-assessment tools and a method for risk assessments that helps to justify security investments.

The Version 8 update is likely to garner a lot of attention from companies looking to address the "reasonable security" requirements referenced in California law (see Cal. Civ. Code 1798.81.5(b), 1798.150(a)(1)), including in the forthcoming California Privacy Rights Act (CPRA), as well as