CIS Controls v8.1 Essentials

The CIS Controls tell you which defensive actions stop real attacks and in what order. Implementation Group 1 is the baseline insurers and customers increasingly expect.

This package gives you an honest, item-by-item baseline against CIS Critical Security Controls v8.1. Every safeguard is already in the workbook. Score each on a 0 to 5 maturity scale, set a target, and the workbook calculates the gap, places each gap in a wave (Do first, Do next, Do later) and flags what is not assessed, gaps with no owner and any level 3 or higher claim with no evidence behind it.

The summary tab rolls everything up by control with a current-versus-target chart you can put straight into a leadership report.

It also includes the three foundation policies every program starts with, each paired with a full technical procedure: governance that names no tools, and step-by-step execution with placeholders for your tools, settings and screenshots.

What is included

1. CIS-Controls-v8-1-Assessment.xlsx: the full assessment, summary and chart.

2. CIS-Controls-v8-1-Essentials-Guide.pdf: the framework explained, the maturity scale, honest scoring and your first 30 days.

3. Implementation Group Scoping Worksheet (Word).

4. Three full policies (8 to 10 pages each): Information Security, Acceptable Use and Access Control, with document control, roles and RACI, numbered policy statements, organization-defined parameters, metrics and a framework alignment table (Word).

5. Three companion procedures (12 to 16 pages each): Information Security Program Management, Acceptable Use Onboarding and Enforcement, and Access Management, with step-by-step technical instructions, configuration tables and screenshot placeholders (Word).

Who it is for

IT managers, security leads, managed service providers and vCISOs at small and mid-sized organizations who want a prioritized, practical security baseline, need to prove CIS Controls implementation to an insurer, customer or auditor, or are working toward Implementation Group 1, 2 or 3.

Formats

Excel assessment, PDF guide, 3 policies, 3 procedures.

About the framework text

Cites safeguards by number with our own labels and guidance. Download the official CIS Controls v8.1 free from cisecurity.org and keep it beside the workbook. Not affiliated with or endorsed by the Center for Internet Security.

License

License. Your purchase grants one organization a perpetual, non-exclusive license to use, copy, and modify these materials for its own internal security program, including sharing completed questionnaires and contract exhibits with its own vendors. You may not resell, sublicense, or redistribute the templates themselves, in original or modified form, as a product. Consultants and managed service providers who want to use the materials across multiple client organizations need a practitioner license; contact cyberauctoritas.com.

Disclaimer

This material is provided for general information and internal program building. It is not legal advice and does not certify compliance with any law, regulation, or framework. Contract language must be reviewed by qualified counsel before use. Adapt every document to your organization, your risk tolerance, and your obligations.