The CIS Controls is a prioritized set of Safeguards to mitigate the most prevalent cyber-attacks against systems and networks. They are mapped to and referenced by multiple legal, regulatory, and policy frameworks. Check the link: https://www.cisecurity.org/controls/v8
The project includes:
- Gap Analysis
- Information Asset Inventory
- Providing the necessary documentation
- Implementing Safeguards
- Awareness Program
- Internal audit and assessment