Skip to content
Cyber Compliance

CIS Controls v8 → LGPD crosswalk

A control-by-control mapping between CIS Critical Security Controls v8 and Lei Geral de Proteção de Dados (Brazil, Lei 13.709/2018). 2 mappings.

CIS Controls v8LGPDRelationshipNotes
1.1
Establish and maintain detailed enterprise asset inventory
Art. 37
Records of processing operations
RelatedCurated
Asset & data inventory
3.11
Encrypt sensitive data at rest
Art. 46
Security measures
PartialCurated
Cryptography & data protection

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.