CIS Critical Security Controls with ESP
Center for Internet Security - CIS Compliance with ESP
The Center for Internet Security recommends that every organization implements a minimum set of the CIS Critical Security Controls, formerly known as the SANS top 20 controls, these controls detail a minimum security strategy to build your organization’s cyber defense into a robust security infrastructure that combats most modern threats in order to retain the integrity of your cyber assets.
Use Elemental's Solution to implement, monitor and enforce CIS Controls
Elemental Security Platform (ESP) is one of the most advanced cybersecurity, compliance, and risk management automation platforms on the market. Resilient enterprise SaaS, it is scalable for any network security infrastructure, from small businesses to large enterprises. ESP offers easy out-of-the-box deployment, continuous and automated management, and auditor-proof enforcement of technical controls needed to implement CIS recommended controls and benchmarks. Hundred of controls in the form of actionable security policies can be deployed to your servers and other hosts in a matter of minutes, providing instant security configuration compliance visibility in your environment. Afterward, those controls are monitored and enforced 24/7, with precise reporting on policy outcomes available to your team with a click of a button.
Elemental's ESP technology goes beyond simple host security configuration checking and continuous compliance reporting, it enables automatic system hardening by enforceing most of the deployed technical controls. This is easily accomplished by deploying security policies with enforcement mode activated.
An example of enforceable SSL/TLS related controls/rules:
Note: the little hammer in front of a control/rule means 'Enforceable Rule'.
CIS Critical Security Controls
Putting these security controls into practice is not a frivolous venture. Unprotected organizations are at risk of malware, ransomware, spyware, and DDos attacks that can hamper business productivity for days or weeks by loosing crucial access and sensitive data, both of which may never be re-attainable without a cyber protection plan. Implementing these basic security practices within your organization could vastly reduce your cyber exposure and eliminate these basic threats.
Elemental provides coverage for 14 out of the 18 CIS Critical Security Controls and addresses the compliance gaps and issues that are often associated with traditional CIS Controls implementations.