What are the next steps in the process after receiving a 100% completion in CIS CSAT-Hosted?

Problem

Solution

There are several potential next steps:

1. Close the existing assessment

The way to close an existing assessment in CIS CSAT-Hosted is to use the green “Assessment Menu” in the upper right corner, and then select one of the three options from the “End Current Assessment” sub-menu. This moves the current assessment to the “Assessment History”. You can still view a read-only version from the Assessment History menu on the left. The screenshot below shows where this is done:

Open

2. Analyze your results; identify areas for improvement, and develop a plan

Use the CSAT Assessment Dashboard to identify low scoring CIS Controls and low scoring CIS Safeguards within those CIS Controls. Please see the following link for more details on CIS Controls: CIS Controls Version 8.

Consider conducting a risk assessment using the CIS Risk Assessment Method (CIS RAM) to determine if your current CIS Controls implementation is acceptable or where it needs to be improved. Please see the following links to download CIS RAM content: CIS Controls CIS-RAM and CIS WorkBench / Home.

Also, consider developing a plan to improve low scoring CIS Safeguards and any areas of unacceptable risk. CIS offers many other resources that can help including CIS Controls companion and implementation guides, and other tools including the CIS Configuration Assessment Tool (CIS-CAT). Please see the following links for more information on CIS-CAT Pro tools: CIS-CAT Pro.

3. Conduct another assessment with CSAT

Your organization’s cybersecurity posture changes over time. It’s important to track those changes. You can either keep updating your existing assessment in CSAT, or you can close your current assessment and start a new one as described above. Either way, you want to maintain a current understanding of your organization’s cyber readiness and try to make continuous improvements. Organizations may want to continuously update their assessments or they may want to conduct full assessments on a periodic basis (every 6 months, every year, etc.).

Keywords; csat hosted 100 completion assessment

Content by Label