CIS Controls are a set of best practices for securing computer systems and networks. They were developed by the Center for Internet Security (CIS) to provide a framework for organizations to improve their security posture. The controls are important because they help organizations mitigate common cyber threats and protect against data breaches, which can be costly and damaging to an organization’s reputation.