Developed by the Center for Internet Security (CIS), the 20 CIS Controls tell organizations to what extent and with what defenses they are prepared for any cyber attacks within the 20 domains.