CIS Controls v8

1.1 Establish and maintain detailed enterprise asset inventory

Maintain an accurate, detailed and up-to-date inventory of all enterprise assets.

3.11 Encrypt sensitive data at rest

Encrypt sensitive data at rest on servers, applications and databases.

5.1 Establish and maintain an inventory of accounts

Maintain an inventory of all accounts managed in the enterprise.

6.1 Establish an access granting process

Establish and follow a process for granting access to enterprise assets upon new hire or role change.

7.1 Establish and maintain a vulnerability management process

Establish and maintain a documented vulnerability management process for enterprise assets.

8.1 Establish and maintain an audit log management process

Establish and maintain a documented audit log management process defining the enterprise's logging requirements.

4.1 Establish and maintain a secure configuration process

Establish and maintain a secure configuration process for enterprise assets and software.

11.1 Establish and maintain a data recovery process

Establish and maintain a documented data recovery process covering scope, prioritisation and backup security.