s90

Home / Compliance / CIS Controls

For teams that want a practical, prioritized baseline

CIS ControlsIncluded

The essential safeguards, in place and proven.

The CIS Critical Security Controls are a prioritized set of safeguards that defend against the most common attacks, grouped so you start with the essentials and build from there. They're included in Complete IT and built into your Technology Posture Report, which shows each quarter which safeguards are in place.

Six identical closed Dell laptops stacked neatly on a pale wood table.

At a glance

Framework
CIS Controls
Evidence
Technology Posture Report, quarterly
Included in
Complete IT: Managed or Co-Managed

Does this apply to you?

It likely fits if you need to:

What the rule asks for, and what you receive.

  1. 01

    Know every device and app you have

    Asset and software tracking

    Device and app inventory evidence

  2. 02

    Protect data and manage access

    Access controls and data protection

    Access and data protection evidence

  3. 03

    Keep systems patched

    Patching

    Patch status evidence

  4. 04

    Back up and recover

    Tested backup and recovery

    Recovery test records

  5. 05

    Train staff and oversee service providers

    Awareness training and provider reviews

    Training and provider review records

We provide the evidence. You decide.

s90 does

  • Runs the controls the framework calls for
  • Keeps the documentation current
  • Reports it in your Technology Posture Report every quarter

You decide

  • Whether the evidence meets your obligations
  • Which open gaps to close first
  • Whether you meet the standard

The Technology Posture Report

Built into your Technology Posture Report, with every check mapped to CIS Controls, delivered every quarter without asking. The proof in your hands is never more than three months old.

Get the sample Technology Posture Report by email

Sample · Technology Posture Report

ACME Corp · Quarter 3 · Mapped to CIS Controls

Device and app inventory evidence
Current
Access and data protection evidence
Enforced
Patch status evidence
Current

Sample report for a fictional business. Example figures.

Other frameworks you may answer to.

Low-rise office buildings with tile roofs among oaks and palms in the south Orange County foothills, with Saddleback Mountain in the morning haze beyond.
s90

One question to ask yourself

If an insurer asked which safeguards are in place, could you show them?

Up to$500,000Cyber WarrantyBacked by Cork Inc.

In 30 minutes, we talk through your setup and you leave knowing which plan fits.

Book a call

See exactly what you'd receive each quarter, by email.

Get the sample Posture Report by email