Sort the Network Control by the Risk It Reduces
Map network administration tasks to CIS Controls for infrastructure, logging, monitoring, and recovery.
Match the network task to the CIS Control it most directly supports. Secure configuration Audit log management Data recovery Network monitoring and defense Disable Telnet and require SSH with centralized AAA on switches Send firewall, VPN, and core switch logs to retained central syslog Verify nightly router and firewall configuration backups can be restored Monitor east-west deny spikes and unusual outbound flows with NetFlow Remove default SNMP communities from network devices Keep 90 days of VPN authentication logs searchable by user and source IP Run a quarterly restore test for a branch firewall replacement Alert when DNS egress shifts to…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in