Skip to content

CIS Controls v8Essential Eight crosswalk

A control-by-control mapping between CIS Critical Security Controls v8 and ACSC Essential Eight. 8 mappings.

CIS Controls v8Essential EightRelationshipNotes
11.1
Establish and maintain a data recovery process
E8-8
Regular backups
EquivalentCurated
Sauvegarde et restauration
4.1
Establish and maintain a secure configuration process
E8-5
Application control
PartialCurated
Configuration sécurisée et durcissement
4.1
Establish and maintain a secure configuration process
E8-6
Restrict Microsoft Office macros
PartialCurated
Configuration sécurisée et durcissement
4.1
Establish and maintain a secure configuration process
E8-7
User application hardening
PartialCurated
Configuration sécurisée et durcissement
6.1
Establish an access granting process
E8-3
Multi-factor authentication
PartialCurated
Contrôle d'accès et identité
6.1
Establish an access granting process
E8-4
Restrict administrative privileges
PartialCurated
Contrôle d'accès et identité
7.1
Establish and maintain a vulnerability management process
E8-1
Patch applications
EquivalentCurated
Gestion des vulnérabilités
7.1
Establish and maintain a vulnerability management process
E8-2
Patch operating systems
EquivalentCurated
Gestion des vulnérabilités

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.