CIS CSAT (On Prem & Host) and Create Assessment
The CIS Controls Self-Assessment Tool, or CIS CSAT, is a free web application that enables security leaders to track and prioritize their implementation of the CIS Controls. CIS CSAT’s questions are based off the popular Critical Security Manual Assessment Tool excel document and the platform was developed by our partners at EthicalHat . For each CIS Control and sub-control, CSAT helps organizations track its documentation, implementation, automation, and reporting.
CIS CSAT Features
CIS CSAT enables security teams to track and prioritize their implementation of the CIS Controls. For each CIS Control and CIS Safeguard, CIS CSAT helps an organization track its documentation, implementation, automation, and reporting.
Use CIS CSAT to:
- Collaborate across teams and assign user roles
- Choose which specific Safeguards to include in your assessments
- Upload documentation as supporting evidence
- Track assessments over time and view graphs of your progress
- Monitor alignment to other security frameworks with CIS Controls mappings to frameworks including NIST CSF and NIST SP 800-53
- Anonymously compare results to industry averages
- Coming Soon. Estimate an enterprise’s likelihood of being affected by a ransomware attack with the Ransomware Business Impact Analysis tool (created in partnership with Foresight Resilience Strategies (4RS))
There are two versions of CIS CSAT: a CIS-hosted version and an on-premises version for CIS SecureSuite Members called CIS CSAT Pro.
CIS-Hosted CSAT
The CIS-hosted version of CIS CSAT is free to every organization for use in a non-commercial capacity to conduct CIS Controls assessments of their organization. This free, CIS-Hosted version of CSAT was released in early 2019 and is available at CIS CSAT.
Your account will be verified with an OTP sent to your registered email.
Create a new assessment
Assign user and due time
User will get an email for each sub-control assigned to him/her.
Complete the questions
- IG1 (Minimum, 56 Safeguards)
- IG2 (Recommended, 56 + 74 Safeguards)
- IG3 (Full, 56 + 74 + 23 Safeguards)
Complete each sub-control
Validate
CIS CSAT Pro
- Save time by using a simplified scoring method with a reduced number of questions
- Decide whether to opt in to share data and see how scores compare to industry average
- Greater flexibility with organization trees for tracking organizations, sub-organizations, and assessments
- Assign users to different roles for different organizations/sub-organizations as well as greater separation of administrative and non-administrative roles
- Track multiple concurrent assessments in the same organization
- Easily access your tasks, assessments, and organizations from a consolidated home page
- Includes CIS Controls Safeguard mappings to NIST CSF, NIST SP 800-53, and PCI
CIS CSAT Pro Installation
Installation
Videos
共有 0 条评论