General CIS CSAT FAQ's

Problem

What is CIS CSAT?

The CIS Controls® Self-Assessment Tool, also known as CIS CSAT, enables organizations to assess and track their implementation of the CIS Controls. The CIS Controls are a prioritized set of consensus-developed security best practices used by organizations around the world to defend against cyber threats.

How does CIS CSAT help with CIS Controls assessments?

CIS CSAT supports cross-departmental collaboration by allowing users to delegate questions to others, validate the responses, create sub-organizations, and more. At any point in the assessment, you can export your results into various formats. With CIS CSAT, you can create a new assessment, view historical assessments, and compare your results to an anonymized “peer group” within the same industry.

Which versions of CIS CSAT are available?

There are two versions of CIS CSAT: a CIS-hosted version and an on-premises version for CIS SecureSuite Members called CIS CSAT Pro.

Is CIS CSAT free?

The CIS-hosted version of CIS CSAT is free to every organization for use in a non-commercial capacity to conduct CIS Controls assessments of their organization. If you’d like to use CSAT in a commercial capacity to assess other organizations (consulting, etc.), you will need to become a CIS SecureSuite Member.

Related Content