Using only Half of the CIS Controls for a client assessment


Product Name

CIS CSAT Pro - SecureSuite CIS Controls Self-Assessment Tool

Product Version

v1.12.0

Date

May 25, 2023



 

Problem

How to customize CSAT Assessment Controls to fit an organization’s needs.

 

Solution

Selecting “Not Applicable” or Not “Available” will still count against your score. You can use the Applicable toggle to scope individual Safeguards out of the assessment entirely. The blue toggle says “Applicable” to the upper right of the Safeguard View for each Safeguard (near the IG indicator for that Safeguard). For any Safeguards that you toggle off, those Safeguards are not in the scope of the assessment and will not count against you in scoring that assessment.

Content by Label


Copyright © 2023

Center for Internet Security®