The CIS Critical Security Controls (CIS Controls) are a set of actionable best practices that organizations should prioritize to improve their cybersecurity posture. Formerly known as the SANS Critical Security Controls (SANS Top 20 Controls), these guidelines are now published by the Center for Internet Security (CIS).
An international community of experts updates the list of controls periodically. In its current version 8, as of May 2021, there are 18 controls divided by activities.