4.1 Establish and maintain a secure configuration process

Mapped across 10 provisions

Equivalent and related requirements in other frameworks and regulations.

• ISO 27001EquivalentOfficial mapping

  Source: CIS Controls v8 / ISO/IEC 27001

  A.8.9 Configuration management

  Secure configuration & hardening

• NIST CSF 2.0EquivalentOfficial mapping

  Source: CIS Controls v8 / NIST CSF 2.0

  PR.PS-01 Configuration management practices established

  Secure configuration & hardening

• Cyber EssentialsEquivalentCurated
  CE-2 Secure configuration

  Secure configuration & hardening

• Cyber EssentialsPartialCurated
  CE-1 Firewalls

  Secure configuration & hardening

• Essential EightPartialCurated
  E8-5 Application control

  Secure configuration & hardening

• Essential EightPartialCurated
  E8-6 Restrict Microsoft Office macros

  Secure configuration & hardening

• Essential EightPartialCurated
  E8-7 User application hardening

  Secure configuration & hardening

• NIST 800-171EquivalentCurated
  3.4.2 Establish and enforce security configuration settings

  Secure configuration & hardening

• NIST 800-53EquivalentCurated
  CM-6 Configuration settings

  Secure configuration & hardening

• PCI DSSEquivalentCurated
  Req. 2 Apply secure configurations to all system components

  Secure configuration & hardening