Blog Feed - Center for Internet Security

Lessons learned for securing large scale events and CIS's critical role as a partner supporting event security operations at the 2026 FIFA World Cup

The CIS CTI team assesses vishing will continue to pose a risk to U.S. SLTT organizations. Read the team's analysis and recommendations.

Recent attacks on water systems offer a blueprint for resilience. Explore five lessons utilities can use to strengthen cybersecurity and operations.

A UK survey reveals cyber risk is growing, but cyber resilience is not keeping pace. Learn how CIS SecureSuite can help UK organizations move from awareness to execution.

The following CIS Benchmarks have been updated during the past month. We've highlighted the major updates below.

What's security stagflation look like? The cost of finding bugs is down, but the cost of fixing them is the same. Here's what CISOs need to know.

Essential Cyber Hygiene Fundamentals Bootcamp helps cyber practitioners implement CIS IG1 Safeguards, reduce risk and strengthen organizational resilience.

These CIS Benchmarks and CIS Build Kits have been updated or recently released and include a full changelog that references all changes.

The Enterprise Asset Management Policy Template for CIS Controls v8.1 in French helps organizations inventory, track, and manage enterprise assets across physical, virtual, and cloud environments.

CIS and SAFECode have updated Secure by Design: A Developer’s Guide to Building Safer Software to address the role of AI on software security.

To create safer, more secure large-scale events, read our recommendations for defending against five emerging risks to public gatherings.

FEMA clarifies that SLCGP/TCGP grants can fund CIS Services. See what qualifies, what's required, and what's next.

Here are six key takeaways from a CIS webinar for how U.S. SLTT agencies can strengthen public safety through collective defense.

CIS Controls Accreditation is raising global cybersecurity standards, setting a trusted benchmark for excellence, resilience, and best practices.

The following CIS Benchmarks and CIS Build Kits have been updated or recently released. We've highlighted the major updates below.

Healthcare organizations can satisfy cybersecurity and HIPAA compliance obligations while upholding patient safety. Read on to learn how.

Diego Bolatti advances CIS Controls adoption for SMEs through research, policy templates, and AI-driven cybersecurity tools.

Our Malicious Code Analysis Platform (MCAP) supports malware analysis specifically designed for SLTT teams. Read our blog post to learn more.

The 2026 Verizon DBIR highlights how CIS Controls and CIS Benchmarks strengthen cybersecurity hygiene and defend against today's top attacks.

The following CIS Benchmarks and CIS Build Kits have been updated or recently released. We've highlighted the major updates below.