Skip to content
Cyber Compliance

CIS Controls v8 → LGPD crosswalk

A control-by-control mapping between CIS Critical Security Controls v8 and Lei Geral de Proteção de Dados (Brazil, Lei 13.709/2018). 2 mappings.

CIS Controls v8LGPDRelationshipNotes
1.1
Establish and maintain detailed enterprise asset inventory
Art. 37
Records of processing operations
RelatedCurated
Inventaire des actifs et des données
3.11
Encrypt sensitive data at rest
Art. 46
Security measures
PartialCurated
Cryptographie et protection des données

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.