SafeGuards v.1

Question 1

CIS Control 2: Inventory and Control of Software Assets

Answer 1

Safeguards:
Maintain a current list of all software.
Implement software whitelisting.
Enforce strict controls on software installation.

Implementation Group: All IGs
Function: Identify, Protect

Question 1

CIS Control 1: Inventory and Control of Hardware Assets

Answer 1

Safeguards:
Keep an up-to-date list of all hardware devices.
Use automated tools to track hardware inventory.
Restrict access to hardware assets.

Implementation Group: All IGs
Function: Identify, Protect

Question 2

CIS Control 3: Continuous Vulnerability Management

Answer 2

Safeguards:
Regularly scan for vulnerabilities.
Establish a patch management process.
Monitor vulnerability reports.

Implementation Group: All IGs
Function: Detect, Respond

Question 3

CIS Control 4: Controlled Use of Administrative Privileges

Answer 3

Safeguards:
Follow least privilege principles.
Use multi-factor authentication for admins.
Log and monitor admin activities.

Implementation Group: All IGs
Function: Protect, Detect

Question 4

CIS Control 5: Secure Configuration for Hardware and Software on Mobile Devices, Laptops, Workstations, and Servers

Answer 4

Safeguards:
Develop standard security configurations.
Regularly audit and enforce configurations.
Apply security patches promptly.

Implementation Group: All IGs
Function: Protect, Detect

Question 5

CIS Control 6: Maintenance, Monitoring, and Analysis of Audit Logs

Answer 5

Safeguards:
Enable audit logging on all systems.
Centralize log management.
Regularly review logs for suspicious activities.

Implementation Group: All IGs
Function: Detect, Respond

Question 6

CIS Control 7: Email and Web Browser Protections

Answer 6

Safeguards:
Implement email filtering.
Train users on identifying phishing attempts.
Use web content filtering.

Implementation Group: All IGs
Function: Protect, Detect

Question 7

CIS Control 8: Malware Defenses

Answer 7

Safeguards:
Deploy anti-malware software.
Use application whitelisting.
Sandbox suspicious files.

Implementation Group: All IGs
Function: Protect, Detect

Question 8

CIS Control 9: Limitation and Control of Network Ports, Protocols, and Services

Answer 8

Safeguards:
Disable unnecessary ports and services.
Implement network segmentation.
Use firewalls to control traffic.

Implementation Group: All IGs
Function: Protect, Detect

Question 9

CIS Control 10: Data Recovery Capability

Answer 9

Safeguards:
Perform regular data backups.
Test backup and recovery procedures.
Store backups securely offsite.

Implementation Group: All IGs
Function: Recover

Question 10

CIS Control 11: Secure Configuration for Network Devices, such as Firewalls, Routers, and Switches

Answer 10

Safeguards:
Apply firmware updates regularly.
Disable unused services and interfaces.
Use strong authentication for device access.

Implementation Group: All IGs
Function: Protect, Detect

Question 11

CIS Control 12: Boundary Defense

Answer 11

Safeguards:
Use intrusion detection/prevention systems.
Configure firewalls to filter traffic.
Monitor network traffic for anomalies.

Implementation Group: All IGs
Function: Protect, Detect

Question 12

CIS Control 13: Data Protection

Answer 12

Safeguards:
Encrypt sensitive data.
Implement data loss prevention solutions.
Enforce strict access controls.

Implementation Group: All IGs
Function: Protect, Detect

Question 13

CIS Control 14: Controlled Access Based on the Need to Know

Answer 13

Safeguards:
Implement role-based access controls.
Regularly review access permissions.
Enforce least privilege.

Implementation Group: All IGs
Function: Protect, Detect

Question 14

CIS Control 15: Wireless Access Control

Answer 14

Safeguards:
Use strong encryption for wireless networks.
Regularly scan for rogue access points.
Enforce authentication for wireless access.

Implementation Group: All IGs
Function: Protect, Detect

Question 15

CIS Control 16: Account Monitoring and Control

Answer 15

Safeguards:
Implement user account management policies.
Monitor user account activities.
Disable or remove unused accounts promptly.

Implementation Group: All IGs
Function: Protect, Detect

Question 16

CIS Control 17: Security Skills Assessment and Appropriate Training to Fill Gaps

Answer 16

Safeguards:
Provide regular security awareness training.
Conduct skills assessments.
Encourage reporting of security incidents.

Implementation Group: All IGs
Function: Identify, Protect

Question 17

CIS Control 18: Application Software Security

Answer 17

Safeguards:
Implement secure coding practices.
Regularly review code for security issues.
Keep software up-to-date with patches.

Implementation Group: All IGs
Function: Protect, Detect