Quick Definition
The Center for Internet Security Critical Security Controls, or CIS CSC, are a set of guidelines intended to help organizations to protect themselves and their systems against known cyberattack vectors.
The prioritized list of actions is organized into 20 "controls," each covering a different area of risk or protection. The controls are designed to align well with important industry or national regulatory regimes, ensuring that they also assist adhering organizations to achieve more formal forms of compliance.